macos-spm-app-packaging
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several utility scripts (
package_app.sh,compile_and_run.sh,sign-and-notarize.sh,setup_dev_signing.sh,build_icon.sh) that execute a wide range of shell commands for building Swift binaries, managing icons, signing bundles, and interacting with macOS security tools likecodesign,lipo,sips, andsecurity. - [INDIRECT_PROMPT_INJECTION]: The packaging scripts ingest configuration from a local
version.envfile using thesourcecommand. This represents a potential injection surface if the skill is used on untrusted project repositories, as the environment variables or shell logic within that file could influence the execution flow. - Ingestion points: Sourcing of
version.envinpackage_app.shandsign-and-notarize.sh. - Boundary markers: None present for the environment configuration file.
- Capability inventory: Full subprocess execution, file system manipulation, binary signing, and notarization workflows.
- Sanitization: None.
Audit Metadata