asc-notarization

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documents standard macOS development practices for archiving, exporting, and notarizing applications using system tools.- [COMMAND_EXECUTION]: The skill uses standard macOS system utilities including xcodebuild, codesign, security, ditto, xcrun, hdiutil, and productsign. These tools are necessary for the development tasks described and are used in a conventional manner.- [EXTERNAL_DOWNLOADS]: The skill includes a command to fetch notarization logs from a URL using curl and format the output with python3 -m json.tool. This is a standard procedure for viewing JSON-formatted logs provided by Apple's notarization API.- [CREDENTIALS_UNSAFE]: The skill references environment variables (ASC_*) and the asc auth login command for authentication. This is consistent with standard practice for managing credentials in CLI environments and does not involve hardcoding secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 09:34 PM