mobile-cicd
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard, well-structured configuration templates for mobile build and release processes. All command examples (Fastlane, Gradle, keytool, EAS CLI) are legitimate tools for mobile development.
- [SAFE]: Security best practices are explicitly followed for credential management. The skill uses
${{ secrets.* }}syntax for GitHub Actions andSystem.getenv()for Android builds, avoiding hardcoded secrets. It also includes a clear warning to never commit keystore files to version control. - [SAFE]: External references (GitHub, official actions, and Expo) target well-known and trusted services. There are no signs of obfuscation, prompt injection, or unauthorized data exfiltration.
Audit Metadata