desktop-signing
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation guide for code signing and notarization processes, following standard industry protocols for Windows and macOS.
- [SAFE]: Security best practices are emphasized, specifically instructing users to handle sensitive credentials like .pfx files, .p8 API keys, and certificates via environment variables and CI/CD secrets rather than committing them to code repositories.
- [SAFE]: The mentioned software dependencies (e.g., @electron/osx-sign, @electron/notarize, and Azure Trusted Signing tools) are legitimate, widely-used packages and services within the desktop development ecosystem.
- [SAFE]: No indicators of malicious behavior, such as prompt injection, code obfuscation, or unauthorized data exfiltration attempts, were detected.
Audit Metadata