fireworks-macapp-creator
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's documentation and installer (install.sh) download files from the author's GitHub repository (yizhiyanhua-ai/fireworks-macapp-creator). These downloads are used to fetch the skill's components and reference materials for local installation.
- [COMMAND_EXECUTION]: The
init_macos_swiftpm_app.pyscript performs local file operations to generate a Swift package structure. Theoss_audit.pyscript usessubprocess.runto execute a local synchronization check. These operations are deterministic and restricted to the local development environment. - [REMOTE_CODE_EXECUTION]: The README provides a one-line installation command that pipes a remote shell script from GitHub into bash. This is a common pattern for developer tools and, since it targets the vendor's verified repository, it is considered a legitimate installation mechanism in this context.
- [DYNAMIC_EXECUTION]: The scaffolding script (
init_macos_swiftpm_app.py) dynamically generates Swift source code based on user-provided parameters like app name and style. The script sanitizes input (slugification) and writes to static file paths, avoiding unsafe execution of user-supplied code.
Audit Metadata