upload-ios-build
Fail
Audited by Snyk on Aug 13, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). This skill instructs manual upload of a built .ipa to an external URL while explicitly sending the user's GitHub auth token and advising against CI/webhooks (reducing auditability), which constitutes intentional data exfiltration and credential exposure.
Issues (1)
E006
CRITICALMalicious code pattern detected in skill scripts.
Audit Metadata