asc-api-automation
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a local Swift script (scripts/mint-asc-token.swift) to generate authentication tokens. The script relies solely on Apple's native CryptoKit and Foundation libraries, avoiding third-party dependencies and external code execution.
- [SAFE]: All network operations are targeted at the official App Store Connect API (api.appstoreconnect.apple.com) for legitimate release management and reporting tasks.
- [SAFE]: The documentation provides clear guidance on secure credential management, instructing users to store sensitive keys in gitignored environment files and to use restricted API roles to minimize risk.
Audit Metadata