macos-dmg-builder
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard developer utility for macOS application distribution. It manages sensitive information such as Apple IDs and app-specific passwords by prompting the user securely or using environment variables, specifically advising against echoing these secrets to the terminal.
- [COMMAND_EXECUTION]: The skill executes standard macOS development commands (xcodebuild, xcrun, codesign, hdiutil, security) to perform its stated tasks. These are necessary for the skill's primary purpose of application release automation and are invoked on local project files.
- [DATA_EXPOSURE]: The scripts attempt to read the local user's Apple ID from the 'MobileMeAccounts' system defaults to streamline the setup process. This is a common pattern for local developer tools and does not involve any network transmission or remote exfiltration.
Audit Metadata