mobile-ios-submission
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of
eas-clivianpm install -g. This is the official command-line interface for Expo Application Services (EAS) and is a standard requirement for mobile development workflows using Expo. - [COMMAND_EXECUTION]: The skill involves executing various shell commands using
eas-cli(e.g.,eas build,eas submit,eas login) to manage certificates, build binaries, and upload projects to App Store Connect. These are documented functionalities of the Expo ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill processes project configuration files such as
app.jsonandeas.jsonto configure build profiles and app metadata. - Ingestion points: Project configuration files (
app.json,eas.json) and project source files are ingested into the agent context. - Boundary markers: No explicit delimiters or boundary markers are instructed for use when parsing these files.
- Capability inventory: The skill possesses the capability to execute build and submission commands (
eas build,eas submit) which involve network operations and local project compilation. - Sanitization: No explicit sanitization or validation of the input file contents is described in the workflow.
Audit Metadata