capacitor-ci-cd

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides templates that download standard development tools and utilize official GitHub Actions.
  • Incorporates trusted actions such as actions/checkout, actions/setup-node, and actions/setup-java.
  • Installs the fastlane automation tool and various semantic-release plugins.
  • References the widely-used thyrlian/android-sdk Docker image and the r0adkll/upload-google-play community action.
  • [COMMAND_EXECUTION]: The skill includes shell commands for building, signing, and deploying applications using platform-standard tools.
  • Employs xcodebuild and the security utility for iOS build processes and keychain management.
  • Utilizes gradlew for Android application bundling and assembly.
  • [CREDENTIALS_UNSAFE]: The skill demonstrates safe practices for managing sensitive information in CI/CD pipelines.
  • Instructions correctly specify the use of platform secrets and environment variables for API keys and signing credentials.
  • Employs Base64 encoding to securely inject binary signing certificates and keystores into the build environment, which is a standard industry practice.
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill serves its primary purpose as a technical guide using standard industry practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 05:56 PM