lov-app-release
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strong security best practices for production releases. It explicitly instructs the agent to never print secrets, passwords, or private keys (Step 1). It mandates artifact verification using SHA-256 checksums and signing identity checks for Android (Step 5) and iOS (Step 6). All network operations and deployments are scoped to the project's existing and authorized providers (e.g., GitHub, Vercel, App Store) rather than introducing new or untrusted third-party services. The workflow also requires reading back the actual state of public channels to ensure the reported status matches reality, preventing misleading release information.
Audit Metadata