deploy-release-test
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution via CLI Tools: The skill utilizes the GitHub CLI (
gh) and Node.js to interact with repository workflows and validate build artifacts. These operations are scoped to thevercel/next.jsrepository and are standard for development and testing tasks. - Handling of External Data: Branch names and commit identifiers are retrieved dynamically from GitHub APIs. The skill incorporates a safety check (
isCrossRepository) to ensure the secret-bearing workflow is only triggered for internal pull requests, which acts as a protective boundary for the execution environment. - Interaction with Vendor Infrastructure: The skill fetches and validates preview packages from
vercel-packages.vercel.app, which is a resource managed by the skill's author. This ensures that the correct build artifact is successfully resolved and available before the deployment suite is dispatched.
Audit Metadata