macos-dev-setup

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes multiple shell commands to inventory the system state (e.g., sw_vers, xcode-select, brew --version, df -h) and verify installation success (e.g., brew doctor, docker info). These are necessary for its primary function of environment orchestration.
  • [DATA_EXPOSURE]: The inventory process checks for the existence of SSH keys (ls ~/.ssh/id_*) and retrieves the global git email configuration. This is used strictly to identify existing credentials and avoid duplicate generation or overwriting user files, aligning with the skill's preservation policy.
  • [PERSISTENCE_MECHANISMS]: The skill manages dotfiles and shell profiles (like .zshrc), which is standard behavior for a development environment setup to ensure tools and prompts remain active across sessions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 06:29 PM
Security Audit — agent-trust-hub — macos-dev-setup