Skills
Navigate
skills/tassiovale/claude-code-kit/add-app-clip/Gen Agent Trust Hub

add-app-clip

Fail

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructs users to execute bunx setup-safari and bunx testflight. These are unverified third-party packages executed via a package runner. According to the instructions, setup-safari logs into Apple Developer accounts, and testflight handles app credentials and submission, presenting a significant risk of credential theft if the packages are malicious or hijacked.
  • [EXTERNAL_DOWNLOADS]: The skill installs the @bacons/apple-targets package from an external source during the bun create target command. It also directs users to documentation hosted on sosumi.ai, which is not a verified well-known service or trusted organization.
  • [COMMAND_EXECUTION]: The skill performs several shell operations to modify project configuration, generate local source code files (Swift and TypeScript), and deploy the application using eas deploy and other CLI tools.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jun 13, 2026, 06:23 AM