ship-ios
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill automates the iOS release pipeline by executing local development tools such as
xcodebuild,xcrun,swift,eas-cli,pnpm, andjust. These commands are used for building, testing, and archiving applications on the maintainer's local machine, ensuring that no sensitive build artifacts are processed by third-party cloud builders unless explicitly requested. - [DATA_EXPOSURE]: Logic within the shell scripts retrieves necessary API keys and tokens (e.g., New Relic User API keys) from local environment files like
.envand~/.localrc. The skill includes specific safeguards to ensure these credentials are never committed to version control or printed to logs, and it enforces the use of production identities only for production builds. - [DYNAMIC_EXECUTION]: The skill uses
python3for local JSON processing of simulator data and utilizesswiftto run utility scripts provided by the New Relic React Native agent for symbol and source map uploads. These executions are performed on local files within the project scope or standard system paths.
Audit Metadata