mobile-android-submission
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate instructions for Android app submission using standard development tools (EAS CLI, Expo SDK). All referenced URLs point to official documentation from Expo and Google.- [CREDENTIALS_UNSAFE]: The workflow involves handling sensitive files such as Android keystores (.jks) and Google Cloud service account JSON keys. The skill demonstrates safe practice by explicitly warning the user to add these files to .gitignore and explaining the risks of credential exposure.- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the official 'eas-cli' package from the public npm registry. This is a standard and expected requirement for the task of building and submitting Expo apps.- [INDIRECT_PROMPT_INJECTION]: The skill operates on local project configuration files (app.json, eas.json). While these files constitute an ingestion point for external data, the skill uses standard tools for processing and provides static templates, maintaining a safe posture.
Audit Metadata