ios-memgraph-leaks

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local developer tools including xcrun, simctl, and leaks to analyze iOS simulator processes.
  • Evidence: capture_sim_memgraph.sh uses xcrun simctl spawn to list processes and leaks to generate memgraphs.
  • Evidence: summarize_memgraph_leaks.py uses subprocess.run to call leaks for generating summaries and trace trees from existing memgraph files.
  • The shell execution uses proper argument handling (no shell=True in Python, and quoted variables in Bash) which mitigates standard injection risks.
  • [SAFE]: The skill operates entirely within the local development environment using standard Apple developer tools. It does not perform network operations, exfiltrate data, or request elevated privileges (sudo). All file operations target temporary directories or user-specified output paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 10:12 AM