build-test-verify
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard developer commands for the Bitwarden Android project.
- Standard Tooling: Uses official tools like Gradle (
./gradlew) and Fastlane (fastlane) for building, testing, and deployment. - Environment Management: References
GITHUB_TOKENfor authenticating with GitHub Packages, which is a standard requirement for accessing private or scoped Maven repositories on GitHub. It correctly advises checkinguser.propertiesor environment variables for this secret. - Codebase Discovery: Employs benign
findandgrepcommands to help the agent navigate the project structure (e.g., locating ViewModels, Hilt modules, and UI components). - Filtered Output: Uses standard shell piping (
2>&1 | grep) to improve the visibility of test and lint failures, which is a common developer practice to handle noisy build outputs. - Well-Known Services: All external references, such as
maven.pkg.github.com, target well-known and trusted infrastructure.
Audit Metadata