codexisland-macos-notch
Warn
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the user to install software from a personal Homebrew tap (
ericjypark/tap/codexisland) and download binaries from a personal GitHub repository (github.com/ericjypark/codex-island/releases). These sources are not associated with trusted organizations or official vendor registries. - [COMMAND_EXECUTION]: The instructions prompt the user to execute several local shell scripts (
./build.sh,./scripts/verify.sh,./release.sh) during the manual build and verification process without validating their contents. - [COMMAND_EXECUTION]: The skill provides explicit instructions to bypass macOS Gatekeeper security features by removing the quarantine attribute (
xattr -dr com.apple.quarantine) from an unsigned third-party application. - [COMMAND_EXECUTION]: The skill encourages the use of the
defaultscommand to modify system-levelUserDefaults(defaults write MacIsland ...), which affects the application's configuration and behavior outside of the skill's sandbox.
Audit Metadata