clawpatch-release

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill defines a standard software release cycle including versioning, building, testing, and publishing to established platforms (npm and GitHub).
  • [COMMAND_EXECUTION]: The skill uses project-specific commands (pnpm, git, npm, gh) for local development and release management. It correctly scopes operations to the target project directory and official remote endpoints.
  • [CREDENTIALS_UNSAFE]: The skill handles sensitive authentication tokens but follows high-security standards by instructing the use of 1Password (op) for secret retrieval, utilizing temporary .npmrc files, and explicitly prohibiting the agent from printing or logging credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 06:41 PM
Security Audit — agent-trust-hub — clawpatch-release