android-workflow-internal

Pass

Audited by Gen Agent Trust Hub on Feb 28, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses local shell commands to create directories and verify the environment (e.g., mkdir, ls, grep).- [COMMAND_EXECUTION]: The generated workflows execute standard build tools including gradlew and fastlane for compilation and deployment.- [EXTERNAL_DOWNLOADS]: The generated workflows reference official and well-known GitHub Actions from the actions/ and gradle/ organizations for setup and caching tasks.- [DATA_EXFILTRATION]: While the workflows handle sensitive files such as Android Keystores and Google Service Account JSONs, these are sourced from secure environment variables (GitHub Secrets) and explicitly deleted from the runner filesystem after use.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 28, 2026, 12:40 PM