aerospace-macos-setup
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several macOS shell commands for installation (
brew), application management (open), and specialized window management tasks via theaerospaceCLI tool. It also includes a diagnostic script for system health checks (scripts/aerospace_diagnose.sh). - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the AeroSpace cask from the official developer's Homebrew tap (
nikitabobko/tap/aerospace). - [INDIRECT_PROMPT_INJECTION]: The skill ingests system logs to diagnose issues, which could contain data from untrusted sources.
- Ingestion points: System logs retrieved via the
log showcommand in bothSKILL.mdand the diagnostic script. - Boundary markers: None present.
- Capability inventory: Includes file system operations (
cp), software installation (brew), application execution (open), and shell command execution via the AeroSpace CLI (exec-and-forget). - Sanitization: None present.
- [DATA_EXFILTRATION]: The skill accesses system logs which may contain sensitive information. It also references a specific local file path in the author's environment for script execution, which acts as data exposure of the internal directory structure.
Audit Metadata