signing-entitlements
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFE
Full Analysis
- Standard System Utilities: The skill utilizes legitimate macOS command-line tools such as
codesign,spctl, andplutilfor inspecting application bundles and binaries. These tools are used as intended for debugging and verification purposes. - No External Communication: The skill does not perform any network operations or external data transfers, ensuring that inspected information remains local to the execution environment.
- Credential Handling: While the skill uses
security find-identityto list available signing certificates, it does not access private keys or sensitive credentials, nor does it attempt to exfiltrate this information.
Audit Metadata