sign-macos-for-github
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill manages highly sensitive Apple Developer credentials including .p12 certificates and .p8 API keys. It mitigates risk by instructing the agent to use GitHub Secrets for storage, avoid echoing secrets to logs, and use temporary protected directories (umask 077) for processing.
- [COMMAND_EXECUTION]: The workflow requires executing multiple macOS security tools such as 'security', 'codesign', and 'notarytool' to manage the keychain and sign binaries. These commands are essential for the skill's purpose but involve high-privilege cryptographic operations.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes repository files such as packaging scripts and workflows, creating a surface for indirect injection from the codebase. Evidence: * Ingestion points: target repository files analyzed in step 1; * Boundary markers: absent; * Capability inventory: shell execution, keychain modification, and network requests via gh and notarytool; * Sanitization: verification of return codes and signature status.
- [EXTERNAL_DOWNLOADS]: The skill references implementation examples and previous workflow runs in the author's GitHub repository (github.com/lassejlv/sidedoor), which is treated as a vendor-owned resource.
Audit Metadata