xcode

SUSPICIOUS: The skill is largely aligned with its stated Xcode automation purpose, and the referenced tools appear to be legitimate same-project/public packages. However, it understates bunx install behavior, routes trust through two external CLIs, allows broad Bash-mediated execution and local device/UI control, and may emit telemetry/log data upstream. This is not malware, but it is a medium-risk skill with meaningful execution and privacy implications.