macos-spm-app-packaging
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several shell scripts designed to automate the macOS software build and packaging lifecycle.
package_app.shexecutesswift buildfor compilation,lipofor creating universal binaries, andcodesignfor applying digital signatures to the app bundle.compile_and_run.shandlaunch.shmanage application processes usingpkilland launch the built software via theopencommand.sign-and-notarize.shinteracts with Apple's notarization service using the standardxcrun notarytoolandstaplerutilities.setup_dev_signing.shusesopensslto generate local development certificates andsecurity importto add them to the user's login keychain. These operations are performed locally and are consistent with the skill's stated purpose as a build automation utility.
Audit Metadata