build-test-verify
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates standard Android development workflows including building, testing, and linting.
- [COMMAND_EXECUTION]: Provides legitimate shell commands for the Gradle wrapper (
./gradlew) and Fastlane to manage the project lifecycle. - [DATA_EXPOSURE]: Includes common filesystem search patterns (
find,grep) to help the agent understand the project structure and locate specific components within the source code. - [CREDENTIALS_UNSAFE]: Correctly identifies the need for a
GITHUB_TOKENfor package resolution without providing any hardcoded secrets. It recommends standard storage practices (environment variables oruser.properties). - [EXTERNAL_DOWNLOADS]: Refers to official Bitwarden SDKs hosted on GitHub Packages (
maven.pkg.github.com), which is a well-known service.
Audit Metadata