skills-release

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documents a standard software release workflow using standard command-line utilities.
  • Command Execution: Uses git, jq, and gh (GitHub CLI) for repository management and JSON parsing. These are expected tools for this skill's primary purpose.
  • File Access: Reads and modifies .claude-plugin/plugin.json and .claude-plugin/marketplace.json to manage versioning.
  • Network Operations: Interacts with GitHub (origin) via git push and gh release, which are appropriate for a release-management skill.
  • Security Awareness: The skill explicitly includes a warning in Step 8 to avoid shell command substitution when drafting release notes, demonstrating proactive security guidance for the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 12:12 PM
Security Audit — agent-trust-hub — skills-release