Skills/skills.sh/solana-mobile-publishing

solana-mobile-publishing@r1

CAUTION

Publisher claims: "Build, sign, and publish an Android APK to the Solana dApp Store with the dapp-store CLI. Use when shipping a Solana mobile app to the dApp Store for the first time, releasing an update, signing a release APK, setting up a publisher account and App NFT, or debugging a release build that works fine in debug." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher solana-mobile · joined 0 days agoInstalls 6,588Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsSKILL.md:228 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageSKILL.md:297 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsSKILL.md:225 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageSKILL.md:16 · npx invocation of non-well-known package — may execute untrusted code

AST06

LOW

Unpinned dependencySKILL.md:13 · Unpinned dependency

AST06