skills/wibaek/skills/headver/Gen Agent Trust Hub

headver

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical reference for the HeadVer versioning scheme ({head}.{yearweek}.{build}). All content is pedagogical and focuses on improving build traceability and release management.
  • [COMMAND_EXECUTION]: The skill includes GitHub Actions YAML examples that reference local scripts (e.g., ./scripts/build-publish.sh). These are documented as placeholders for user-provided implementation and do not execute external or unverified code. The use of GitHub Actions syntax like ${{ github.token }} and environment variables is consistent with standard CI/CD best practices.
  • [EXTERNAL_DOWNLOADS]: The documentation points to the official HeadVer specification on GitHub (github.com/line/headver). As this targets a well-known service for technical reference, it is considered safe.
  • [DATA_EXPOSURE]: No hardcoded credentials, sensitive file path access, or data exfiltration patterns were identified. The workflow permissions are explicitly scoped (permissions: {} or specific needs like contents: write), following the principle of least privilege.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 09:46 AM
Security Audit — agent-trust-hub — headver