gpd-release-flow
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation and command-line templates for using a specific deployment tool (
gpd). No instances of prompt injection, obfuscation, or unauthorized data access were identified. - [COMMAND_EXECUTION]: The instructions involve executing local CLI tools (
gpd,jq) and using shell variables to manage release IDs. This behavior is entirely consistent with the skill's stated purpose of automating Google Play Store publishing tasks. - [CREDENTIALS_UNSAFE]: While the skill mentions the
GPD_SERVICE_ACCOUNT_KEYenvironment variable, it does so as a configuration requirement rather than hardcoding sensitive values. This follows standard security practices for secret management.
Audit Metadata