agent-skill-deploy
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
node:child_process(execSync) to interact with system CLI tools includinggitand the GitHub CLI (gh). This is necessary for its stated purpose of managing repository state and creating releases. - [SAFE]: The skill implements strong input validation. The version argument is strictly validated against a semantic versioning regex (
/^\d+\.\d+\.\d+$/), and deployment surfaces are checked against an allowed whitelist. - [SAFE]: High-stakes operations such as version bumping, tagging, and pushing to remote repositories are gated behind explicit user approval prompts using the
AskUserQuestiontool. - [SAFE]: The pre-flight script performs extensive checks on the repository state (clean working tree, correct branch, tool availability) before allowing deployment actions to proceed.
Audit Metadata