The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes standard iOS development tools such as xcodebuild, codesign, and security. It provides instructions for executing administrative commands like sudo xcode-select -s to switch the active Xcode version, which is a standard requirement for maintaining build environment consistency on macOS CI/CD runners.
[DATA_EXPOSURE]: The skill manages sensitive cryptographic assets including Apple Distribution certificates (.p12 files) and App Store Connect API keys (.p8 files). It follows security best practices by explicitly warning against committing these secrets to version control and providing detailed instructions for using CI secrets, environment variables, and automated cleanup steps to prevent credential leaks.
[INDIRECT_PROMPT_INJECTION]: The skill processes project configuration data (e.g., Info.plist, build settings) from the local repository using xcodebuild and PlistBuddy. While the data originates from an untrusted source, the risk is mitigated by using structured data parsing and following strict verification protocols to confirm the binary's signing identity and team ID before completion.
[REMOTE_CODE_EXECUTION]: External documentation and repository links are directed exclusively to trusted organizations (Apple, Fastlane) and well-known services (GitHub). No patterns of arbitrary remote script execution or unverifiable dependency installation were found.

ios-build-sign