shipping-build-artifacts
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides best practices for build and release workflows. It includes examples of how to prevent shipping broken artifacts by ensuring build scripts exit on error, verifying artifact sizes, and checking for drift in committed assets.
- [SAFE]: The provided code examples use standard, well-known tools like esbuild, jq, and Python's tomllib in a safe and educational context to illustrate reliable build gates.
- [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or unauthorized remote code execution were identified. The use of npx with a pinned version is a standard development practice.
Audit Metadata