android-playstore-setup
Audited by Socket on Feb 16, 2026
1 alert found:
MalwareThis Skill is an operational setup guide to automate Google Play internal-track deployment. It requests and guides handling of highly sensitive credentials (service account JSON and keystore base64) and creating CI workflows that will use them. The overall capability is coherent with its stated purpose and uses standard tools (Fastlane, Google APIs). The primary security concern is credential management and accidental leakage (committing keystores/JSON, overly broad service account permissions, or exposing secrets in CI logs). There are no signs of intentional malicious behavior or obfuscation in the document itself, but misuse or poor configuration could lead to credential compromise. Treat as functionally legitimate but operationally sensitive; follow least-privilege and secret-handling best practices.