signing-entitlements

Pass

Audited by Gen Agent Trust Hub on Apr 10, 2026

Risk Level: SAFE
Full Analysis
  • Standard System Utilities: The skill utilizes legitimate macOS command-line tools such as codesign, spctl, and plutil for inspecting application bundles and binaries. These tools are used as intended for debugging and verification purposes.
  • No External Communication: The skill does not perform any network operations or external data transfers, ensuring that inspected information remains local to the execution environment.
  • Credential Handling: While the skill uses security find-identity to list available signing certificates, it does not access private keys or sensitive credentials, nor does it attempt to exfiltrate this information.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 10, 2026, 02:37 AM