The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/inspect-widget-artifact.py utilizes subprocess.run to execute the system codesign utility. This execution is used to extract entitlements and AppIntent metadata from local iOS .app bundles for development inventory and verification. The command is implemented using a list of arguments rather than a shell string, which follows secure development practices by preventing shell injection.
[SAFE]: The skill demonstrates a strong focus on data validation and integrity. The scripts/validate-widget-payload.py utility is specifically designed to sanitize and validate JSON data before it is persisted in property-list storage, explicitly checking for non-finite numbers and non-string keys. No obfuscation, data exfiltration, or malicious persistence mechanisms were identified in the instructions or associated scripts.

ios-widgetkit-development