The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses standard macOS system utilities (xcodebuild, codesign, security, ditto) to perform app packaging and signing tasks. These commands are necessary for the skill's stated purpose of software distribution.
[DATA_EXFILTRATION]: While the skill interacts with the macOS keychain via the security command, it does so to verify signing identities and manage certificate trust settings required for notarization. No evidence of unauthorized credential extraction or exfiltration to third-party domains was found.
[INDIRECT_PROMPT_INJECTION]: The skill includes instructions to fetch notarization logs from Apple using curl and format the output with python3 -m json.tool. As the source of this data is the Apple Notary Service (a trusted service), the risk of malicious instruction injection through these logs is minimal.

asc-notarization