SkillTrust

← All skills

nuget-trusted-publishing

100 / 100 · Low risk

Fine to try.

By managedcode/dotnet-skills (GitHub) · coding · 514 stars · scanned at commit b461d18

Set up NuGet trusted publishing (OIDC) on a GitHub Actions repo — replaces long-lived API keys with short-lived tokens. USE FOR: trusted publishing, NuGet OIDC, keyless NuGet publish, migrate from NuGet API key, NuGet/login, secure NuGet publishing. DO NOT USE FOR: publishing to private feeds or Azure Artifacts (OIDC is nuget.org only). INVOKES: shell (powershell or bash), edit, create, ask_user for guided repo setup.

Works with any agent that supports SKILL.md skills.

What this skill can do

We found nothing in the files we read that matches our rules. That does not prove the skill is safe: see the limits of static scanning.

Other copies in this repository

managedcode/dotnet-skills has 1 more folder with a skill named nuget-trusted-publishing. This page shows the lowest-scoring copy.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'nuget-trusted-publishing' ] || [ -L ~/.agents/skills/'nuget-trusted-publishing' ]; then echo 'A skill folder named nuget-trusted-publishing already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/managedcode/dotnet-skills' "$d" && git -C "$d" checkout --quiet 'b461d186f21dcab31bc4b1cf48f7cced8ac61780' -- 'catalog/Platform/Official-DotNet-Advanced/skills/nuget-trusted-publishing' && mkdir -p ~/.agents/skills && cp -R "$d"/'catalog/Platform/Official-DotNet-Advanced/skills/nuget-trusted-publishing' ~/.agents/skills/'nuget-trusted-publishing' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'nuget-trusted-publishing' ~/.claude/skills/'nuget-trusted-publishing' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for managedcode/dotnet-skills shows the score of its lowest-scoring skill.

SkillTrust badge for managedcode/dotnet-skills

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/managedcode/dotnet-skills.svg)](https://zalavijaysinh.github.io/skilltrust/repos/managedcode/dotnet-skills/)

Score history

DateVersionScore
2026-11-13b461d18100
2026-11-09bcb5776100
2026-11-07367e97f100