gpd-release-flow
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of the
gpdCLI tool to automate Google Play Store release flows, including build uploads, track promotions, and staged rollouts. These are standard automation patterns for mobile app deployment. - [CREDENTIALS_UNSAFE]: The documentation identifies the requirement for a
GPD_SERVICE_ACCOUNT_KEYenvironment variable for authentication, which is a secure method of handling credentials in automation environments compared to hardcoding secrets. - [DATA_EXPOSURE]: Uses standard shell piping with
jqto extract identifiers from tool outputs for subsequent commands, which is a routine practice for handling structured data in deployment scripts.
Audit Metadata