The Agent Skills Directory

[SAFE]: The skill provides extensive documentation on security-first desktop development. It explicitly mandates secure configurations for Electron (e.g., contextIsolation: true, nodeIntegration: false) and Tauri (capability-based permission model), effectively reducing the risk of remote code execution or cross-site scripting in applications built using these guides.
[SAFE]: The shell script scripts/check_signing.sh is a diagnostic tool that uses standard macOS utilities (codesign, spctl, stapler) to verify the integrity and notarization status of application bundles. It does not perform network operations or request elevated privileges.
[SAFE]: The Python script scripts/check_signing_readiness.py performs static validation of JSON configuration files used for signing pipelines. It includes basic safety checks and does not execute arbitrary code or exfiltrate data.
[SAFE]: All external URLs and resources listed in data/sources.json and the reference files point to official, well-known, and trusted domains belonging to organizations like Microsoft, Apple, JetBrains, and the official documentation sites for Electron and Tauri.
[SAFE]: The skill follows platform-specific security requirements for recent OS updates (macOS 15 Sequoia and Windows 11 24H2), ensuring that developers using the skill are aware of modern entitlement and permission constraints.

software-desktop