macos-runtime-debugger — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited macos-runtime-debugger (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Before invoking Apple-only binaries, confirm the execution context is macOS. From Windows or Linux, run those steps in a Mac SSH project or through an already configured remote transport; do not retry missing Apple binaries locally.
Reuse the project's existing build/run entrypoint first. For one-shot build, launch, log, or debug tasks, use the smallest existing command that proves the requested outcome without adding durable project files. Bootstrap script/build_and_run.sh through /macos-runtime-debug only when the user asks for a reusable run loop or no adequate entrypoint exists and repeated use makes one worthwhile.
git rev-parse --show-toplevel 2>/dev/null || pwd
find . -name '*.xcworkspace' -o -name '*.xcodeproj' -o -name 'Package.swift'Read repository guidance and inspect existing scripts, schemes, package products, and host actions before introducing another entrypoint.
.app bundle and launch with /usr/bin/open -n; do not run as a raw executable.structure merely to make the command repeatable.
adequate entrypoint exists, invoke /macos-runtime-debug and follow references/run-button-bootstrap.md. Do not duplicate its full snippets.
.codex/environments/environment.toml only when the user asksfor a Codex Run action. Preserve unrelated existing actions.
./script/build_and_run.sh
./script/build_and_run.sh --debug
./script/build_and_run.sh --logs
./script/build_and_run.sh --telemetry
./script/build_and_run.sh --verify/macos-runtime-debug bootstraps orrefreshes script/build_and_run.sh.
script/build_and_run.sh.xcodebuild.swift build then executable launch.dist/<AppName>.app, copy the binary to Contents/MacOS/, generate minimal Info.plist (APPL, executable, identifier, name, minimum system version, NSApplication), then launch with /usr/bin/open -n.--verify should confirm process existence with pgrep -x <AppName>.--logs/--telemetry for config, entitlements, sandbox, and action-event proof.NSApp.setActivationPolicy(.regular) and NSApp.activate(ignoringOtherApps: true).--debug or direct lldb for symbolized crash debugging.macos-telemetry-probe when verifying specific window/sidebar/menu/menu-bar actions.unless the user explicitly requests that change.
automation only when it will be reused or the user requests it.
and the target entrypoint already exists.
Report detected project type, existing entrypoint selected, command run, build/launch result, any durable artifacts explicitly created, top blocker if failed, and the smallest next action.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.