shipping-swift-apps
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes system commands such as
xcodebuildfor app archiving andgitfor repository management, including verifying.gitignorerules to prevent credential leakage. - [EXTERNAL_DOWNLOADS]: Uses the
uvtool to dynamically install well-known Python packages (requests,pyjwt) to interact with Apple's official App Store Connect API. - [DATA_EXFILTRATION]: Accesses local authentication credentials (App Store Connect
.p8private keys) solely for the purpose of signing JWT tokens to facilitate secure communication with trusted Apple services.
Audit Metadata