macos-runtime-debugger — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited macos-runtime-debugger (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Create one project-local script/build_and_run.sh and use it as the default build/run/debug path. In Codex app sessions, optionally wire the same script to .codex/environments/environment.toml.
git rev-parse --is-inside-work-tree
find . -name '*.xcworkspace' -o -name '*.xcodeproj' -o -name 'Package.swift'If no git repo exists and a host tool needs one, run git init at the workspace root, never inside a nested repo.
.app bundle and launch with /usr/bin/open -n; do not run as a raw executable.script/build_and_run.sh. It should kill existing process, build, launch, and support optional --debug, --logs, --telemetry, and --verify.references/run-button-bootstrap.md as the canonical script/environment shape; do not duplicate a second full snippet..codex/environments/environment.toml only after the script exists; point the Run action at ./script/build_and_run.sh. ./script/build_and_run.sh
./script/build_and_run.sh --debug
./script/build_and_run.sh --logs
./script/build_and_run.sh --telemetry
./script/build_and_run.sh --verifyscript/build_and_run.sh.xcodebuild.swift build then executable launch.dist/<AppName>.app, copy the binary to Contents/MacOS/, generate minimal Info.plist (APPL, executable, identifier, name, minimum system version, NSApplication), then launch with /usr/bin/open -n.--verify should confirm process existence with pgrep -x <AppName>.--logs/--telemetry for config, entitlements, sandbox, and action-event proof.NSApp.setActivationPolicy(.regular) and NSApp.activate(ignoringOtherApps: true).--debug or direct lldb for symbolized crash debugging.macos-telemetry-probe when verifying specific window/sidebar/menu/menu-bar actions.Report detected project type, script/env path configured, command run, build/launch result, top blocker if failed, and the smallest next action.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.