deploy-mobile-apps
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust release management system for mobile applications.
- It uses the GitHub CLI (
gh) and Git for all repository operations. - It includes extensive validation logic in
scripts/mobile_release_lib.pyto ensure that only approved commits are merged and that builds are correctly started on CodeMagic. - While it uses
subprocess.runto execute commands, these are restricted to hardcoded Git and GitHub CLI operations with properly escaped arguments (usingshlex.joinfor logging and safe list-based arguments for execution). - Sensitive data in environment variables is automatically redacted from error messages to prevent accidental exposure.
- Repository access is restricted to the local workspace root and the specific organization repositories defined in
references/apps.json.
Audit Metadata