ci-cd-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard build tools such as
./gradlewfor Android andxcodebuildfor iOS to automate testing and compilation processes. - [COMMAND_EXECUTION]: It utilizes the macOS
securityutility to manage temporary keychains and import certificates required for iOS code signing in CI environments. - [EXTERNAL_DOWNLOADS]: The workflows integrate well-known GitHub Actions from the marketplace (e.g.,
actions/checkout,actions/setup-java,codecov/codecov-action) for environment setup and reporting. - [EXTERNAL_DOWNLOADS]: The Fastlane
Matchfiletemplate references an external Git repository for synchronizing code signing certificates, which is a standard practice for iOS development teams. - [PRIVILEGE_ESCALATION]: The iOS workflow uses
sudo xcode-selectto switch between Xcode versions, which is a necessary administrative operation on GitHub-hosted macOS runners to ensure build compatibility.
Audit Metadata