capacitor-ci-cd
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides templates that download standard development tools and utilize official GitHub Actions.
- Incorporates trusted actions such as
actions/checkout,actions/setup-node, andactions/setup-java. - Installs the
fastlaneautomation tool and various semantic-release plugins. - References the widely-used
thyrlian/android-sdkDocker image and ther0adkll/upload-google-playcommunity action. - [COMMAND_EXECUTION]: The skill includes shell commands for building, signing, and deploying applications using platform-standard tools.
- Employs
xcodebuildand thesecurityutility for iOS build processes and keychain management. - Utilizes
gradlewfor Android application bundling and assembly. - [CREDENTIALS_UNSAFE]: The skill demonstrates safe practices for managing sensitive information in CI/CD pipelines.
- Instructions correctly specify the use of platform secrets and environment variables for API keys and signing credentials.
- Employs Base64 encoding to securely inject binary signing certificates and keystores into the build environment, which is a standard industry practice.
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill serves its primary purpose as a technical guide using standard industry practices.
Audit Metadata