apple-containers
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation scripts from Tailscale's official domain (tailscale.com), which is a well-known service for secure networking.
- [REMOTE_CODE_EXECUTION]: Executes remote installation scripts via pipe to shell for both Tailscale (curl ... | sh) and the author's personal dotfiles (curl ... | bash). Both sources are identified as legitimate based on the skill's purpose and the author's identity.
- [COMMAND_EXECUTION]: Uses container exec and ssh to perform system-level configurations including package management, user creation, and service management. It also configures passwordless sudo for the created user inside the container, which is standard practice for development environment automation.
- [CREDENTIALS_UNSAFE]: Interacts with the 1Password CLI (op read) to retrieve a Tailscale auth key. This is a secure credential management practice as it avoids hardcoding secrets in the skill body.
Audit Metadata