eas-app-stores
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes command-line tools such as
eas-cli,testflight, andsubmit-expo-feedbackto manage the app deployment lifecycle. These tools facilitate cloud builds, store submissions, version management, and feedback reporting. - [EXTERNAL_DOWNLOADS]: The instructions require the installation of the EAS CLI and the execution of utility packages via
npxfrom the standard NPM registry. These downloads are consistent with the official developer tools provided by the vendor (Expo). - [COMMAND_EXECUTION]: The skill handles sensitive deployment artifacts, including Apple distribution keys (.p8) and Google service account JSON files. It correctly instructs users to manage these via secure methods like EAS Secrets or environment variables and to ensure they are excluded from version control via .gitignore.
Audit Metadata