solana-mobile-publishing
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill involves executing several development commands including npm for package installation, solana-keygen for wallet creation, gradlew for Android builds, and the dapp-store-cli for the publishing process.
- [EXTERNAL_DOWNLOADS]: Fetches the official publishing CLI from the NPM registry and references legitimate documentation and source code repositories under the solana-mobile organization. These are recognized as trusted and well-known sources per security guidelines.
- [SAFE]: The instructions demonstrate a high level of security awareness, specifically advising users on how to prevent private key exposure in command-line transcripts and warning against potential credential exfiltration through malicious environment configurations in third-party repositories.
Audit Metadata