xcode-build-benchmark
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates the execution of xcodebuild through the scripts/benchmark_builds.py script. The script uses subprocess.run() with a list of arguments, which prevents command injection by avoiding shell parsing. It supports a --extra-arg flag to pass additional flags to xcodebuild, which are also handled safely as distinct command-line arguments.
- [SAFE]: The skill operates locally on project files and writes artifacts to a designated .build-benchmark/ directory. No network activity, obfuscation, or sensitive data access was found.
Audit Metadata