skills/avdlee/xcode-build-optimization-agent-skill/spm-build-analysis/Snyk

spm-build-analysis

Warn

Audited by Snyk on Sep 14, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). The helper script scripts/check_spm_pins.py executes git ls-remote --tags against remote dependency URLs found in project files, which retrieves remote repository metadata and tags from external git hosting services.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 14, 2026, 02:59 PM

Issues

1