github-actions-ios
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides security-focused guidance for iOS CI/CD. It explicitly warns against anti-patterns like committing private keys or certificates to source control and recommends using the App Store Connect API Key over personal Apple IDs.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill mentions common environment variables for secrets (e.g.,
AUTHKEY_P8,MATCH_PASSWORD,EXPO_TOKEN) in the context of standard GitHub Actions configuration. It does not contain actual hardcoded credentials or instructions to exfiltrate data. - [REMOTE_CODE_EXECUTION]: The skill references standard, well-known GitHub Actions (
actions/checkout,actions/cache) and industry-standard tools (fastlane,xcodebuild,eas-cli). It does not include any suspicious remote script execution patterns.
Audit Metadata