gimbal-release
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of additional agent skills from the author's public repository (
github.com/tylergannon/gimbal/tree/main/skills) via thevp dlxcommand. This is used to keep the agent's capabilities synchronized with the project's maintained source. - [COMMAND_EXECUTION]: The workflow relies heavily on the
justcommand runner to perform development tasks, including code generation, frontend dependency installation, and running unit tests. These commands interact with local scripts and system tools required for the build process. - [COMMAND_EXECUTION]: Specific shell scripts, such as
scripts/release-macos.shandscripts/sign-native-dev.sh, are executed to manage the macOS application lifecycle, including signing with Developer ID certificates and submission for Apple notarization.
Audit Metadata