ship-workflow-ship
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard development toolchains to verify artifact quality. Specifically, it executes
npm test,npm run build,npm run lint, andnpx tsc --noEmit. These commands are appropriate for its stated purpose of software validation and do not involve unauthorized shell operations. - [DATA_EXPOSURE]: The skill reads project metadata (specifications, review results) to generate release documentation (README.md, ship report). This data processing is local to the project workspace and does not access sensitive system paths, environment variables, or private credentials.
- [SAFE]: The workflow incorporates significant safety features, including a 'Hard Gate' that prevents deployment without a verified rollback plan, mandatory staging validation for software artifacts, and multi-specialized audit roles (security, performance, accessibility). These measures are designed to ensure operational stability and safety.
Audit Metadata