android-release-signing
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell commands for verifying Android application signatures. These commands use standard Android SDK and JDK utilities, such as apksigner and jarsigner, to inspect build artifacts in a local or CI environment.
- [EXTERNAL_DOWNLOADS]: The skill references the
expoCLI vianpx, which is a standard development tool from a trusted organization. - [SAFE]: The documentation explicitly promotes secure credential management, instructing users to use environment variables and CI secrets rather than hardcoding sensitive information like keystore passwords in the repository.
Audit Metadata