desktop-packaging
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate instructions and templates for application distribution on macOS, Windows, and Linux.
- [COMMAND_EXECUTION]: Provides standard shell commands for code signing and notarization using platform-native tools like
codesign,signtool, andnotarytool. - [CREDENTIALS_UNSAFE]: Adheres to security best practices by using environment variables and placeholders for sensitive information like Apple IDs, app-specific passwords, and certificate passwords, explicitly advising against committing secrets to version control.
- [EXTERNAL_DOWNLOADS]: Mentions well-known services for application updates and timestamping (e.g., DigiCert for code signing timestamps), which is standard practice for software distribution.
Audit Metadata