wjs-publishing-testflight
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill includes hardcoded Apple Developer account identifiers such as the Apple ID (jianshuo@hotmail.com), Team ID (97XBW2A43H), and ASC Issuer ID. These are used as template configuration values for the vendor's own environment and do not include private keys or passwords.
- [COMMAND_EXECUTION]: The provided CI/CD configuration includes shell commands such as sudo xcode-select to set the Xcode version and various shell subshells via Ruby backticks for git tag operations, which are standard for build automation workflows.
- [EXTERNAL_DOWNLOADS]: The skill references external dependencies from the official RubyGems registry (fastlane) and repositories on GitHub for certificate management (match certs).
Audit Metadata