apple-release-provenance
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely composed of Markdown files providing procedural guidance and auditing templates. It does not contain any executable scripts, binary files, or automation commands.
- [DATA_EXFILTRATION]: The instructions explicitly forbid the recording of sensitive information, stating: 'never record credentials or private keys'. This follows security best practices for handling release evidence.
- [EXTERNAL_DOWNLOADS]: The skill includes several links to
developer.apple.com. These are official resources for Apple's developer platform and are considered trusted sources for technical documentation. - [COMMAND_EXECUTION]: There are no shell commands, sub-processes, or dynamic execution patterns present in the skill files. References to 'Xcode MCP DocumentationSearch' are references to intended tool usage rather than automated execution.
Audit Metadata