macos-internals
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content regarding macOS internals for detection engineering. It lists sensitive paths (Keychain, TCC.db, persistence locations) and commands (security, xattr, osascript) solely as data sources for monitoring and attack detection. No malicious instructions, obfuscation, or data exfiltration logic were found.
Audit Metadata