mac-dev-apps

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill follows best practices for system setup automation and restricts its scope to GUI applications.
  • [COMMAND_EXECUTION]: The skill utilizes the brew and mas command-line tools to manage application installations on macOS. These are standard administrative actions for the intended use case, and the skill includes instructions to seek user confirmation before executing any installation commands.
  • [EXTERNAL_DOWNLOADS]: Software is downloaded from the official Homebrew repository and the Apple Mac App Store. These are trusted, well-known distribution channels. The skill explicitly warns users against using untrusted third-party sites for application downloads.
  • [PROMPT_INJECTION]: The skill ingests user input for application names to be installed, which is a surface for indirect prompt injection. This is mitigated by the instruction to verify tokens against a provided internal catalog and to use validation commands like brew info before performing installations.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 06:29 PM
Security Audit — agent-trust-hub — mac-dev-apps