release
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a documentation and procedural guide for software releases. It does not contain executable code or scripts.
- [SAFE]: It promotes strong security hygiene by instructing the agent to run
gosec(a security linter for Go) and using thestep-security/harden-runnerGitHub Action to monitor CI/CD environments. - [SAFE]: The release workflow emphasizes supply chain security by pinning all GitHub Actions to full commit SHAs rather than mutable tags.
- [SAFE]: It advocates for the principle of least privilege by specifying that the
GITHUB_TOKENshould be restricted to write-only for contents.
Audit Metadata