kmp-publishing-ci — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited kmp-publishing-ci (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill for KMP release automation, Maven publishing, Gradle metadata, public library release, XCFramework, SwiftPM export, KMMBridge, CocoaPods migration, CI matrix design, and app-store build boundaries.
checkKotlinAbi when configured, target matrix, publication dry run.Package.swift, checksum validation, tag/version rule, wrapper target when Swift dependencies must accompany a binary target.spm() or cocoapods() mode, versioning, and iOS consumer documentation.For release work, provide:
Useful validation tasks when configured:
checkPomFileForMavenPublicationcheckSigningConfigurationpublishToMavenCentralpublishAndReleaseToMavenCentral./gradlew jvmTestxcodebuild or Kotlin iOS simulator compile/link tasksUse publish tasks as dry-run or validation-only unless the user explicitly requests release execution.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.