asc-notarization
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard macOS development practices for archiving, exporting, and notarizing applications using system tools.- [COMMAND_EXECUTION]: The skill uses standard macOS system utilities including
xcodebuild,codesign,security,ditto,xcrun,hdiutil, andproductsign. These tools are necessary for the development tasks described and are used in a conventional manner.- [EXTERNAL_DOWNLOADS]: The skill includes a command to fetch notarization logs from a URL usingcurland format the output withpython3 -m json.tool. This is a standard procedure for viewing JSON-formatted logs provided by Apple's notarization API.- [CREDENTIALS_UNSAFE]: The skill references environment variables (ASC_*) and theasc auth logincommand for authentication. This is consistent with standard practice for managing credentials in CLI environments and does not involve hardcoding secrets.
Audit Metadata