publish-npm-version
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands (git, node, pnpm, gh) to automate version calculations and repository management. These commands are transparently documented and align with the stated purpose of facilitating project releases.
- [EXTERNAL_DOWNLOADS]: Executes
pnpm installto prepare the environment for version bumping. It mitigates supply chain risks by using the--frozen-lockfileflag and the--ignore-scriptsflag, ensuring no unauthorized lifecycle scripts are executed during the installation. - [SAFE]: No malicious patterns such as credential harvesting, prompt injection, or code obfuscation were detected. The skill's operations are confined to the repository's maintenance workflow as described by the vendor.
Audit Metadata