xcode-compilation-analyzer

Pass

Audited by Gen Agent Trust Hub on Apr 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The provided Python script scripts/diagnose_compilation.py uses subprocess.run to invoke the xcodebuild command-line tool. The analysis confirms that arguments are passed as a list rather than a shell string, effectively mitigating risks of shell command injection. The commands executed (clean, build) are standard for the tool's stated purpose.
  • [EXTERNAL_DOWNLOADS]: The skill contains references to external documentation from reputable sources including Apple's developer portal, SwiftLee, Bitrise, and RocketSim. These references are used solely for providing optimization guidance and do not involve the download or execution of untrusted scripts or binaries.
  • [DATA_EXFILTRATION]: No patterns associated with data exfiltration or unauthorized network requests were detected. The Python script processes build logs locally and saves diagnostic artifacts to a user-defined local directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 2, 2026, 03:27 PM