macos-spm-app-packaging

Pass

Audited by Gen Agent Trust Hub on Feb 26, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes several shell scripts designed to automate the macOS software build and packaging lifecycle.
  • package_app.sh executes swift build for compilation, lipo for creating universal binaries, and codesign for applying digital signatures to the app bundle.
  • compile_and_run.sh and launch.sh manage application processes using pkill and launch the built software via the open command.
  • sign-and-notarize.sh interacts with Apple's notarization service using the standard xcrun notarytool and stapler utilities.
  • setup_dev_signing.sh uses openssl to generate local development certificates and security import to add them to the user's login keychain. These operations are performed locally and are consistent with the skill's stated purpose as a build automation utility.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 26, 2026, 08:12 AM