ci-cd
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive instructions for setting up Flutter CI/CD pipelines using industry-standard platforms like GitHub Actions, Codemagic, and fastlane, following security best practices.
- [SAFE]: Detailed guidance is provided on handling sensitive signing materials, such as Android keystores and iOS certificates, by using base64-encoded CI secrets instead of committing them to the repository.
- [SAFE]: The skill correctly identifies common security pitfalls, such as hardcoding build numbers or committing service-account JSON files, and provides correct architectural alternatives.
- [SAFE]: The skill uses well-known, community-standard GitHub Actions (e.g.,
subosito/flutter-action) and tools (e.g.,fastlane) in its configuration templates. - [SAFE]: Instructions include proper use of
.gitignoreto prevent accidental exposure of local configuration and secret files generated during the build process.
Audit Metadata