gimbal-release

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of additional agent skills from the author's public repository (github.com/tylergannon/gimbal/tree/main/skills) via the vp dlx command. This is used to keep the agent's capabilities synchronized with the project's maintained source.
  • [COMMAND_EXECUTION]: The workflow relies heavily on the just command runner to perform development tasks, including code generation, frontend dependency installation, and running unit tests. These commands interact with local scripts and system tools required for the build process.
  • [COMMAND_EXECUTION]: Specific shell scripts, such as scripts/release-macos.sh and scripts/sign-native-dev.sh, are executed to manage the macOS application lifecycle, including signing with Developer ID certificates and submission for Apple notarization.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 07:55 PM