axiom-code-signing
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill serves as a guide for best practices in Apple code signing and distribution.
- [COMMAND_EXECUTION]: The skill lists several shell commands for inspecting local certificates and provisioning profiles using standard macOS system utilities such as
security,codesign, andplutil. These are used for legitimate debugging and are documented neutrally. - [SAFE]: The content includes explicit security warnings against anti-patterns like sharing .p12 certificates via insecure channels or committing them to git, instead promoting the use of CI/CD secrets management.
Audit Metadata