publish-npm-version

Pass

Audited by Gen Agent Trust Hub on May 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell commands (git, node, pnpm, gh) to automate version calculations and repository management. These commands are transparently documented and align with the stated purpose of facilitating project releases.
  • [EXTERNAL_DOWNLOADS]: Executes pnpm install to prepare the environment for version bumping. It mitigates supply chain risks by using the --frozen-lockfile flag and the --ignore-scripts flag, ensuring no unauthorized lifecycle scripts are executed during the installation.
  • [SAFE]: No malicious patterns such as credential harvesting, prompt injection, or code obfuscation were detected. The skill's operations are confined to the repository's maintenance workflow as described by the vendor.
Audit Metadata
Risk Level
SAFE
Analyzed
May 17, 2026, 05:56 AM