android-workflow-internal
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands to create directories and verify the environment (e.g.,
mkdir,ls,grep).- [COMMAND_EXECUTION]: The generated workflows execute standard build tools includinggradlewandfastlanefor compilation and deployment.- [EXTERNAL_DOWNLOADS]: The generated workflows reference official and well-known GitHub Actions from theactions/andgradle/organizations for setup and caching tasks.- [DATA_EXFILTRATION]: While the workflows handle sensitive files such as Android Keystores and Google Service Account JSONs, these are sourced from secure environment variables (GitHub Secrets) and explicitly deleted from the runner filesystem after use.
Audit Metadata