The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses Node.js scripts to coordinate and validate EAS build and submission processes. These scripts execute standard development tools including git, npm, and eas via subprocesses to retrieve project state and perform build operations. These actions are appropriate for the skill's purpose.
[EXTERNAL_DOWNLOADS]: The skill documentation and generated scripts include commands to download build artifacts (e.g., .ipa or .aab files) from Expo's infrastructure for local validation. This is a standard part of the EAS workflow and enables artifact gating before submission to app stores.
[CREDENTIALS_UNSAFE]: The skill implements strict policies against the exposure of signing credentials. It explicitly forbids the agent from accessing sensitive files like private keys or keystores and provides guidance on using EAS-managed credentials and CI secrets for secure operations.
[INDIRECT_PROMPT_INJECTION]: The skill's validation scripts read and process project configuration files such as eas.json, app.config.ts, and package.json. The ingestion is performed using structured parsing and specific validation rules, which effectively mitigates the risk of untrusted data from the project being treated as instructions.

eas-build-and-submit