skills/ponti-studios/kernel/ship-ios/Gen Agent Trust Hub

ship-ios

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill automates the iOS release pipeline by executing local development tools such as xcodebuild, xcrun, swift, eas-cli, pnpm, and just. These commands are used for building, testing, and archiving applications on the maintainer's local machine, ensuring that no sensitive build artifacts are processed by third-party cloud builders unless explicitly requested.
  • [DATA_EXPOSURE]: Logic within the shell scripts retrieves necessary API keys and tokens (e.g., New Relic User API keys) from local environment files like .env and ~/.localrc. The skill includes specific safeguards to ensure these credentials are never committed to version control or printed to logs, and it enforces the use of production identities only for production builds.
  • [DYNAMIC_EXECUTION]: The skill uses python3 for local JSON processing of simulator data and utilizes swift to run utility scripts provided by the New Relic React Native agent for symbol and source map uploads. These executions are performed on local files within the project scope or standard system paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 03:10 AM