ci-cd-android
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill follows industry standard best practices for mobile CI/CD pipelines.
- [EXTERNAL_DOWNLOADS]: The workflow incorporates official and well-known GitHub Actions, including those from the official GitHub, Gradle, and Google Cloud organizations for environment setup and cloud integration.
- [CREDENTIALS_UNSAFE]: The instructions explicitly direct the user to store sensitive information—such as keystore files, passwords, and service account JSONs—in GitHub Secrets, which is the recommended secure practice for CI/CD pipelines.
Audit Metadata