using-xtool
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional, providing a reference for project structure, configuration files (xtool.yml, Package.swift, Info.plist), and command-line usage. It does not contain executable scripts or hidden instructions.
- [COMMAND_EXECUTION]: The documentation references standard developer commands for the xtool utility, such as project creation (
xtool new), building (xtool dev build), and device management (xtool devices). These are consistent with the skill's stated purpose. - [CREDENTIALS_UNSAFE]: The skill mentions commands for authentication (
xtool auth login) and certificate management (xtool ds certificates). These are documented as standard features of the xtool ecosystem for interacting with Apple Developer services and do not involve hardcoded secrets or unauthorized harvesting. - [PROMPT_INJECTION]: The skill does not contain any instructions aimed at overriding agent behavior or bypassing safety filters. It adheres to providing technical guidance for iOS development tasks.
Audit Metadata