google-play
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the use of the gplay CLI, a tool for managing Google Play Console tasks via the Developer API. All instructions are focused on standard app development and publishing workflows.
- [SAFE]: Includes legitimate development code snippets, such as a Gradle signing configuration that correctly uses environment variables for keystore credentials and a Node.js snippet for purchase verification utilizing the official googleapis library.
- [SAFE]: The potential concealment patterns flagged by static analysis in REVIEWS-AND-REPORTS.md and BILLING-AND-PURCHASES.md were analyzed and found to be verbatim Google UX guidelines for app developers regarding silent error handling in review flows, rather than instructions to the AI agent to hide its actions.
- [SAFE]: References to sensitive string patterns like API keys and credential formats are provided for educational purposes to explain the capabilities of the gplay preflight scanner in detecting secrets within the user's own app artifacts.
- [SAFE]: External links and dependencies are restricted to official Google documentation, established technical blogs, and well-known libraries, with no evidence of typosquatting or malicious remote code execution.
Audit Metadata