app-store-connect
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with official Apple services for all app management operations.\n
- Evidence: All API requests in
SKILL.mdand reference files target official endpoints athttps://api.appstoreconnect.apple.com/.\n- [SAFE]: Sensitive API credentials are managed using secure local configuration practices.\n - Evidence: Instructions in
README.mdandSKILL.mdguide the user to store Key IDs and private keys inconfig/credentials.local.md, which is a gitignored file to prevent accidental exposure.\n- [SAFE]: The skill utilizes standard iOS developer tools for build and automation tasks.\n - Evidence: The
references/build-and-deploy.mdandreferences/screenshots-and-previews.mdfiles leverage official tools likexcodebuildandxcrun simctl.\n- [SAFE]: All external dependencies are well-known, reputable libraries necessary for the skill's functionality.\n - Evidence: The skill requires standard packages such as
PyJWTfor authentication,requestsfor API communication, andqrcodewithPillowfor generating TestFlight invitation cards.
Audit Metadata