app-store-connect

Pass

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill interacts exclusively with official Apple services for all app management operations.\n
  • Evidence: All API requests in SKILL.md and reference files target official endpoints at https://api.appstoreconnect.apple.com/.\n- [SAFE]: Sensitive API credentials are managed using secure local configuration practices.\n
  • Evidence: Instructions in README.md and SKILL.md guide the user to store Key IDs and private keys in config/credentials.local.md, which is a gitignored file to prevent accidental exposure.\n- [SAFE]: The skill utilizes standard iOS developer tools for build and automation tasks.\n
  • Evidence: The references/build-and-deploy.md and references/screenshots-and-previews.md files leverage official tools like xcodebuild and xcrun simctl.\n- [SAFE]: All external dependencies are well-known, reputable libraries necessary for the skill's functionality.\n
  • Evidence: The skill requires standard packages such as PyJWT for authentication, requests for API communication, and qrcode with Pillow for generating TestFlight invitation cards.
Audit Metadata
Risk Level
SAFE
Analyzed
May 4, 2026, 11:36 AM