electron-release
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for Electron production builds and release workflows. No malicious patterns, obfuscation, or unauthorized data access were detected.
- [COMMAND_EXECUTION]: The skill includes standard CLI commands for development tasks such as version tagging (git), artifact signing (gpg, smctl), and dependency management (pnpm). These are routine for the stated purpose of the skill.
- [CREDENTIALS_UNSAFE]: Correctly identifies the need for sensitive credentials (API keys, certificates, passwords) but avoids hardcoding them. It consistently recommends using environment variables or platform-specific secret management (e.g., GitHub Secrets).
- [EXTERNAL_DOWNLOADS]: References official and well-known development resources, including GitHub Actions from trusted organizations (actions/checkout, actions/setup-node) and standard package managers (pnpm, npx).
Audit Metadata