headver
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for the HeadVer versioning scheme ({head}.{yearweek}.{build}). All content is pedagogical and focuses on improving build traceability and release management.
- [COMMAND_EXECUTION]: The skill includes GitHub Actions YAML examples that reference local scripts (e.g.,
./scripts/build-publish.sh). These are documented as placeholders for user-provided implementation and do not execute external or unverified code. The use of GitHub Actions syntax like${{ github.token }}and environment variables is consistent with standard CI/CD best practices. - [EXTERNAL_DOWNLOADS]: The documentation points to the official HeadVer specification on GitHub (
github.com/line/headver). As this targets a well-known service for technical reference, it is considered safe. - [DATA_EXPOSURE]: No hardcoded credentials, sensitive file path access, or data exfiltration patterns were identified. The workflow permissions are explicitly scoped (
permissions: {}or specific needs likecontents: write), following the principle of least privilege.
Audit Metadata