apc-launchpad
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local shell commands including
pnpmfor automation scripts,npxfor skill installation, and Apple'sxcrun altoolfor IPA validation and upload. These are standard utilities for iOS development workflows. - [EXTERNAL_DOWNLOADS]: The skill facilitates downloading automation templates from the vendor's repository using
npx skills add voys-apps/app-publishingand incorporates the well-knownjoselibrary for JWT authentication. These resources are scoped to the vendor or established public registries. - [SAFE]: The skill documentation enforces safe credential management by instructing users to use
.envfiles and providing.gitignoretemplates to prevent accidental commitment of sensitive.p8private keys. It also features safety guardrails that prevent the agent from submitting apps for review without explicit user authorization.
Audit Metadata