apple-container-coding-agent

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes subprocess.run to call the git CLI for snapshot management, patch inspection, and diffing. It also uses this mechanism to launch the AI agent within the isolated container environment. Specifically, scripts/prepare-snapshot.py and scripts/inspect-patch.py use these calls for repository maintenance, while assets/worker-entrypoint.py manages the agent process execution.- [EXTERNAL_DOWNLOADS]: The assets/Containerfile fetches AI agent packages from the NPM registry during the build phase. The documentation advises specifying exact versions to maintain environment integrity.- [DATA_EXFILTRATION]: The skill includes defensive features to prevent exfiltration, such as the scripts/prepare-snapshot.py utility which scans for and blocks sensitive files (e.g., keys, credentials, and environment files) from being included in the agent's work environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 07:15 AM
Security Audit — agent-trust-hub — apple-container-coding-agent