Skills
skills/sickn33/antigravity-awesome-skills/macos-spm-app-packaging/Gen Agent Trust Hub

macos-spm-app-packaging

Pass

Audited by Gen Agent Trust Hub on Apr 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides several shell scripts (package_app.sh, sign-and-notarize.sh, compile_and_run.sh) that execute build, signing, and packaging commands using swift build, codesign, lipo, and xcrun. These are standard tools for macOS application development.
  • [CREDENTIALS_UNSAFE]: The sign-and-notarize.sh script handles sensitive App Store Connect API keys by reading them from environment variables and temporarily writing them to /tmp/app-store-connect-key.p8 to facilitate use with xcrun notarytool. The script includes a cleanup routine via a shell trap to remove the temporary file upon completion or interruption.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 26, 2026, 06:58 AM