mobile-widgets
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official developer documentation from Google (developer.android.com) and Apple (developer.apple.com). These are trusted platforms for mobile development resources.
- [CREDENTIALS_UNSAFE]: Instructions for handling sensitive credentials, such as Apple App Store Connect API keys and Android keystore passwords, are provided. The skill correctly identifies and recommends security best practices, such as using secret managers and file-backed passwords to avoid exposing secrets in command history or environment logs.
- [COMMAND_EXECUTION]: The verification sections include standard CLI commands for building and installing mobile applications (e.g.,
xcodebuild,gradlew,apksigner,adb,bundletool). These tools are essential for the documented development workflows and are used as intended for artifact signing and device deployment.
Audit Metadata