The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides numerous shell commands for GPG key generation, public key distribution to keyservers (e.g., keyserver.ubuntu.com), and build tool execution (mvn deploy, ./gradlew publish). These are standard operations for the intended use case.\n- [EXTERNAL_DOWNLOADS]: References several well-known community plugins for Maven and Gradle (e.g., vanniktech/gradle-maven-publish-plugin, JREleaser, gradle-nexus/publish-plugin) to facilitate the publishing process.\n- [DYNAMIC_EXECUTION]: Includes a detailed build.gradle.kts implementation that uses standard JDK libraries to automate checksum generation, artifact bundling (ZIP), and HTTP communication with the Sonatype Central Portal API. The code is clearly documented and its behavior is restricted to the legitimate publishing workflow.\n- [DATA_EXFILTRATION]: Handles sensitive credentials including Sonatype Portal tokens and GPG private keys. The instructions and provided code properly manage these secrets through environment variables and CI/CD secrets (e.g., GitHub Secrets), targeting only the official Sonatype Central Portal (central.sonatype.com) for artifact uploads.

maven-central-publisher