rhdh-bump-yarn

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/bump-yarn.js utilizes node:child_process.spawnSync to execute shell commands. It runs yarn, git, and the current node process (via process.execPath). These commands are used to perform project management tasks such as yarn set version and yarn install --mode=update-lockfile.
  • [COMMAND_EXECUTION]: The script modifies file permissions using fs.chmodSync to apply the executable bit (0o755) to Yarn release binaries located in .yarn/releases/. This is a standard and necessary step for Yarn Berry's operation when binaries are managed within the repository.
  • [COMMAND_EXECUTION]: The script executes local binaries found in the repository's directory tree. Specifically, it executes yarn-*.cjs files using the Node.js runtime to ensure the correct version of Yarn is used for installation and version setting tasks.
  • [SAFE]: The skill is a purpose-built migration tool for a specific vendor environment (Red Hat). All network references and file operations are consistent with its stated purpose of managing internal and external development repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 12:23 PM
Security Audit — agent-trust-hub — rhdh-bump-yarn