semantic-release
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches and installs standard development tools from the well-known semantic-release organization via the official npm package registry.
- [COMMAND_EXECUTION]: Provides standard command-line instructions for environment setup and tool configuration as part of a routine developer workflow.
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access attempts were detected. The skill follows industry-standard security practices by recommending the use of CI/CD secrets (GITHUB_TOKEN and NPM_TOKEN) instead of hardcoding credentials.
Audit Metadata