The Agent Skills Directory

[SAFE]: The skill provides documentation and code examples for standard software development distribution workflows, such as packaging and code signing.
[CREDENTIALS_UNSAFE]: No hardcoded credentials or secrets were identified. The examples use appropriate placeholders like TEAM_ID, your@email.com, and app-specific-password. It also demonstrates secure practices by using process.env and GitHub Secrets (secrets.MAC_CERT_PASSWORD) for handling production keys.
[EXTERNAL_DOWNLOADS]: The skill references established and well-known GitHub Actions, such as oven-sh/setup-bun and softprops/action-gh-release, which are standard for modern development workflows.
[COMMAND_EXECUTION]: Command-line examples use standard system utilities required for application distribution, including security, xcrun, signtool, and bun. No suspicious or hidden command execution patterns were found.
[OBFUSCATION]: The file contains sample signature strings in updates.json (e.g., MC0CFQCf...), which are standard cryptographic artifacts for update validation and do not contain hidden executable code or malicious URLs.

electrobun-distribution