@tank/macos-configurator
Pass
Audited by Gen Agent Trust Hub on May 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or unauthorized data exfiltration attempts were detected. The skill follows best practices by providing documentation, encouraging 'read-before-write' operations, and explaining the side effects of system changes.
- [COMMAND_EXECUTION]: The skill makes extensive use of standard macOS CLI tools including
defaults,scutil,networksetup,pmset,systemsetup,hidutil, andPlistBuddy. These operations are the primary and documented purpose of the skill for system configuration. - [EXTERNAL_DOWNLOADS]: The skill references a well-known community utility (
hidutil-generator.netlify.app) for generating configuration JSON for key remapping. This is a common and legitimate external reference for this specific macOS task. - [PRIVILEGE_ESCALATION]: Several configuration tasks (such as changing DNS, hostnames, or power settings) correctly identify the requirement for elevated privileges via
sudo. The scripts use a standard wrapper (SUDO="${SUDO:-$(command -v sudo)}") to handle these operations transparently and legitimately. - [PERSISTENCE_MECHANISMS]: The skill provides an example of using a LaunchAgent (
com.local.hidutil.plist) to persist custom keyboard remappings across reboots. This is the standard, documented method for persisting these types of driver-level changes on macOS.
Audit Metadata