publish-harness
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a sequence of shell commands to manage the publishing lifecycle, including
npm run build,npm test, andnpm publish. These are standard operations for development and CI/CD workflows. - [COMMAND_EXECUTION]: The skill uses a tool named
harnessto perform signing and verification operations (harness sign,harness verify). It also provides instructions for fetching sensitive credentials through this tool (harness secrets fetch), which aligns with secure secret management practices. - [REMOTE_CODE_EXECUTION]: The skill executes build and test scripts defined within the target directory's
package.json. While this involves running local code, it is the intended and necessary function of a publishing harness.
Audit Metadata