rhdh-bump-yarn
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/bump-yarn.jsutilizesnode:child_process.spawnSyncto execute shell commands. It runsyarn,git, and the currentnodeprocess (viaprocess.execPath). These commands are used to perform project management tasks such asyarn set versionandyarn install --mode=update-lockfile. - [COMMAND_EXECUTION]: The script modifies file permissions using
fs.chmodSyncto apply the executable bit (0o755) to Yarn release binaries located in.yarn/releases/. This is a standard and necessary step for Yarn Berry's operation when binaries are managed within the repository. - [COMMAND_EXECUTION]: The script executes local binaries found in the repository's directory tree. Specifically, it executes
yarn-*.cjsfiles using the Node.js runtime to ensure the correct version of Yarn is used for installation and version setting tasks. - [SAFE]: The skill is a purpose-built migration tool for a specific vendor environment (Red Hat). All network references and file operations are consistent with its stated purpose of managing internal and external development repositories.
Audit Metadata