macos-spm-app-packaging

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides several shell script templates (package_app.sh, compile_and_run.sh, sign-and-notarize.sh) that automate the software build lifecycle.
  • [COMMAND_EXECUTION]: These scripts utilize standard macOS development utilities including swift (build/test), codesign (binary signing), security (keychain management), xcrun notarytool (app notarization), and gh (GitHub release management).
  • [COMMAND_EXECUTION]: The scripts include process management via pkill to reset the application state during development cycles and file system operations to structure the .app bundle.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 07:13 PM