mobile-cicd

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard, well-structured configuration templates for mobile build and release processes. All command examples (Fastlane, Gradle, keytool, EAS CLI) are legitimate tools for mobile development.
  • [SAFE]: Security best practices are explicitly followed for credential management. The skill uses ${{ secrets.* }} syntax for GitHub Actions and System.getenv() for Android builds, avoiding hardcoded secrets. It also includes a clear warning to never commit keystore files to version control.
  • [SAFE]: External references (GitHub, official actions, and Expo) target well-known and trusted services. There are no signs of obfuscation, prompt injection, or unauthorized data exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 01:00 PM