Skip to main content

codemagic

Guides users in configuring codemagic.yaml for CI/CD workflows in mobile app development, enhancing build efficiency and management.

Install this skill

or
81/100

Security score

The codemagic skill was audited on Feb 9, 2026 and we found 7 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 478

Template literal with variable interpolation in command context

SourceSKILL.md
478```yaml
medium line 143

Webhook reference - potential data exfiltration

SourceSKILL.md
143**Note:** Automatic triggering requires webhook configuration in your repository.
medium line 575

Webhook reference - potential data exfiltration

SourceSKILL.md
575- Verify webhook configuration
low line 123

Access to hidden dotfiles in home directory

SourceSKILL.md
123- ~/.gradle/caches
low line 124

Access to hidden dotfiles in home directory

SourceSKILL.md
124- ~/.pub-cache
low line 67

External URL reference

SourceSKILL.md
67API_ENDPOINT: "https://api.example.com"
low line 547

External URL reference

SourceSKILL.md
547# yaml-language-server: $schema=https://codemagic.io/codemagic-schema.json
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →