ios-binary-size-reduction

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides a structured and safety-conscious approach to iOS build optimization. It explicitly forbids unsafe compiler flags (like -Ounchecked) and requires rigorous functional and stability testing after each optimization step.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes project-related files (.xcworkspace, .xcodeproj, and .plist files) which are externally provided. While these files could contain malicious build phases or settings if the source repository is compromised, this is a standard risk for development-related tools. * Ingestion points: Project and workspace paths, scheme names, and export options provided as inputs in SKILL.md. * Boundary markers: Not applicable as the skill operates on complex structured project files. * Capability inventory: Uses xcodebuild for building, archiving, and exporting, and xcrun for binary analysis. * Sanitization: The skill relies on the standard security model of Xcode and local build environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 01:46 AM
Security Audit — agent-trust-hub — ios-binary-size-reduction