ios-xcodegen
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard developer tools such as
xcodegenfor project generation andxcodebuildfor destination discovery. It also utilizesfindto locate Swift Package Manager resolution files. - [DYNAMIC_EXECUTION]: The file
scripts/test_contract.shexecutes an embedded Ruby script to perform structural validation of the skill's own YAML fixtures and documentation. This script usesYAML.safe_loadwith restricted classes and aliases to prevent unsafe deserialization during the check. - [SAFE]: The validation script in
scripts/test_contract.shincludes an automated check that ensures all files in the skill contain only ASCII characters, which acts as a safeguard against certain types of character-based obfuscation and homoglyph attacks.
Audit Metadata