ios-testflight-fastlane
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes fastlane's shell helper to execute build-related tasks such as generating the Xcode project via XcodeGen. All dynamic inputs, including file paths and environment variables, are properly sanitized using the Shellwords.shellescape utility to prevent command injection.
- [EXTERNAL_DOWNLOADS]: The instructions recommend installing fastlane through Homebrew, which is a well-known and trusted package manager for macOS development. This follows best practices for software supply chain security in mobile development.
- [SAFE]: Sensitive data management is performed securely by storing App Store Connect API keys and team identifiers in a gitignored environment file (.env.testflight.local). The skill provides a clear template and documentation ensuring users do not hardcode credentials in their source code.
Audit Metadata