mac-dev-apps
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill follows best practices for system setup automation and restricts its scope to GUI applications.
- [COMMAND_EXECUTION]: The skill utilizes the
brewandmascommand-line tools to manage application installations on macOS. These are standard administrative actions for the intended use case, and the skill includes instructions to seek user confirmation before executing any installation commands. - [EXTERNAL_DOWNLOADS]: Software is downloaded from the official Homebrew repository and the Apple Mac App Store. These are trusted, well-known distribution channels. The skill explicitly warns users against using untrusted third-party sites for application downloads.
- [PROMPT_INJECTION]: The skill ingests user input for application names to be installed, which is a surface for indirect prompt injection. This is mitigated by the instruction to verify tokens against a provided internal catalog and to use validation commands like
brew infobefore performing installations.
Audit Metadata