automate-game-publishing
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by explicitly instructing against hardcoding credentials (such as Steamworks passwords and itch.io API keys) and recommending secret injection exclusively via environment variables.
- [SAFE]: It includes a dedicated 'Security Guardrails' section (aligned with OWASP principles) that addresses identity and privilege abuse, supply chain security, and command injection (RCE) prevention.
- [SAFE]: The instructions mandate headless, reproducible builds from version-controlled sources and require validation gates (smoke tests and integrity checks) before deployment to production channels.
- [SAFE]: The skill advises pinning exact tool versions and verifying checksums for external binaries like steamcmd and butler, mitigating supply chain risks.
Audit Metadata