release
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to manage the release lifecycle, including
pnpm install,pnpm run build,pnpm run check, andpnpm publish. It also runs a local scriptnode scripts/prepare-publish.mjsto prepare build artifacts. - [COMMAND_EXECUTION]: Orchestrates version control operations using
git commit,git tag, andgit pushto finalize the release process. - [EXTERNAL_DOWNLOADS]: Dynamically updates specific project dependencies (
@earendil-works/pi-aiand@earendil-works/pi-agent-core) from the npm registry if the user provides approval. - [DATA_EXFILTRATION]: Transfers repository code and build artifacts to the public npm registry and pushes commits/tags to remote git branches. These operations are the primary intended functions of the release skill.
Audit Metadata