The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes shell commands to manage the release lifecycle, including git for branch and worktree management, node for version parsing, and gh for pull request creation. These are standard operations for a release automation tool.
[REMOTE_CODE_EXECUTION]: The procedure includes pnpm install, which downloads dependencies. However, it explicitly uses the --ignore-scripts and --frozen-lockfile flags, which prevent the execution of untrusted lifecycle scripts from packages and ensures integrity against the lockfile.
[SAFE]: All executed scripts, such as ./scripts/determine-version-utils.ts and the pnpm bump-version command, are internal to the repository being managed. There are no attempts to download or execute code from external untrusted sources or exfiltrate sensitive data.

publish-npm-version