audit-xcode-security-settings
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust security audit workflow for Xcode projects. It uses Model Context Protocol (MCP) tools (e.g., XcodeGlob, XcodeRead) which provide scoped access to the project environment rather than raw filesystem access. The skill's primary function is to enhance security by enabling features like Enhanced Security, Pointer Authentication, and Hardware Memory Tagging. It includes a human-in-the-loop phase where an editable plan is generated and must be approved by the user before any modifications are applied. The bundled Python script,
filter_build_settings.py, is used for local data processing and contains no malicious logic, network operations, or sensitive data access. All external documentation links refer to trusted sources including Apple's developer documentation and the LLVM/Clang project.
Audit Metadata