wjs-publishing-appstore
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development commands such as
xcodebuild,xcrun simctl, and variousfastlaneactions. These operations are necessary for the skill's primary purpose of building, testing, and publishing iOS applications. - [CREDENTIALS_UNSAFE]: The skill handles sensitive App Store Connect credentials using environment variables (e.g.,
ASC_API_KEY_CONTENT,MATCH_GIT_BASIC_AUTH). This is a standard and recommended security practice for CI/CD pipelines and automation scripts to avoid hardcoding secrets. - [EXTERNAL_DOWNLOADS]: The skill includes metadata templates that reference the author's own domain (
home.wangjianshuo.com) for support and privacy URLs. These references are consistent with the vendor's identity and stated purpose.
Audit Metadata