raycast-extension-dev
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a comprehensive development environment for Raycast extensions. It provides templates and guidance for standard software development lifecycles, including project scaffolding and store submission.
- [COMMAND_EXECUTION]: The skill utilizes local shell scripts (
scripts/new-raycast-extension.sh,scripts/check-store-readiness.sh) and aJustfiletemplate to automate development tasks. These scripts perform routine file operations, templating withawk, and image validation using macOS system tools likesips. They are intended for local development use. - [DATA_EXFILTRATION]: The skill includes explicit security instructions in
references/data-and-state.mdadvising developers to strip secrets, such as authentication tokens and environment snapshots, from data objects before they are persisted to the local disk-backed cache. - [PROMPT_INJECTION]: The skill provides defensive coding patterns in
references/ui-patterns.mdto neutralize potential formatting-based injections in program output by using zero-width characters to escape markdown backticks.
Audit Metadata