Laporan audit skill

release-rome-image Laporan audit.

Release a new Rome runtime image by pushing a `vX.Y.Z` tag — pick the version, verify main is releasable, push the tag, and confirm the image published to Docker Hub. Covers the `v*` runtime-image tag only, not the desktop app (`desktop-v*`) and not npm packages (`ui-v*`, `app-runtime-v*`).

Eksperimental · TinjauPerlu ditinjauDihasilkan 14 Okt 2026Audit metadata heuristik
79
Audit
70
Kepercayaan
74
Kualitas
76
Keamanan
100
Maintain
92
Pasang

Trust Score OpenAgentSkill

70
Tinjauan manual

Trust Score OpenAgentSkill

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

Adopsi GitHub

Info

76

518 star GitHub

Aktivitas star/fork

Info

65

518 star dan 41 fork; aktivitas issue tidak tersedia dalam metadata saat ini

Pemeliharaan terbaru

Lulus

100

21 hari sejak push

Kejelasan lisensi

Lulus

86

MIT

Kelengkapan README/SKILL.md

Info

76

Metadata publik memerlukan konteks README/SKILL.md yang lebih kuat

Risiko dependensi/runtime

Peringatan

54

command execution surface, external package install surface

Ketersediaan pemasangan

Lulus

92

npx skills add rome-os/rome --skill release-rome-image

Keamanan perintah pemasangan

Lulus

92

Jalur pemasangan paket atau runtime standar

Cakupan izin

Info

62

shell or command execution, network or browser access

Bukti repositori

Lulus

86

https://github.com/rome-os/rome/tree/main/.claude/skills/release-rome-image

Status peninjauan

Info

66

Data tinjauan AI tersedia

Hasil terbukti Agent

Info

54

Belum ada data hasil Agent

Pemeriksaan

Tinjauan pemasangan dan adopsi

7 Lulus · 9 Perlu ditinjau

Jalur pemasangan

92

Lulus

npx skills add rome-os/rome --skill release-rome-image

Repositori

88

Lulus

https://github.com/rome-os/rome/tree/main/.claude/skills/release-rome-image

Lisensi

86

Lulus

MIT

Pemeliharaan

100

Lulus

21 hari sejak push

Tinjauan AI

55

Periksa

The skill relies on external helper script `scripts/dev/create-patch-release-tag.sh` which is not included in the skill directory; ensure it exists in the repository and is reviewed for safety.

Kelengkapan README/SKILL.md

84

Lulus

Usable description available

Risiko dependensi

54

Perbaiki

command execution surface, external package install surface

Keamanan perintah pemasangan

92

Lulus

Jalur pemasangan paket atau runtime standar

Cakupan izin

62

Periksa

shell or command execution, network or browser access

Aktivitas star/fork

65

Periksa

518 star dan 41 fork; aktivitas issue tidak tersedia dalam metadata saat ini

Adopsi

88

Lulus

518 star GitHub

Peringatan

  • Dependency or permission surface needs review
  • The skill relies on external helper script `scripts/dev/create-patch-release-tag.sh` which is not included in the skill directory; ensure it exists in the repository and is reviewed for safety.
  • Assumes `gh` and `jq` are installed and authenticated; no fallback or error handling is described.
  • Quality score needs review
  • Dependency/runtime risk: command execution surface, external package install surface

Metode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Bandingkan opsi sekitar

Skill terkait untuk diaudit berikutnya