axiom-optimize-build
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various local shell commands to analyze the development environment. It uses
grepto search for build configurations withinproject.pbxproj,xcodebuildto execute builds and profile performance, andsysctlto retrieve system hardware specifications. - [PROMPT_INJECTION]: The skill exhibits a vulnerability surface for indirect prompt injection. Ingestion points: Content from
project.pbxprojandPackage.swiftfiles, and the output fromxcodebuildprofiling. Boundary markers: None; the skill lacks delimiters or instructions for the agent to ignore commands potentially embedded in the ingested data. Capability inventory: InSKILL.md, the agent is directed to usegrep,xcodebuild,sysctl, andsortto process project information and execution logs. Sanitization: None; data from external files and tool outputs is used directly in the agent's reasoning process.
Audit Metadata