ios-xcodegen

Pass

Audited by Gen Agent Trust Hub on Jul 19, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute standard developer tools such as xcodegen for project generation and xcodebuild for destination discovery. It also utilizes find to locate Swift Package Manager resolution files.
  • [DYNAMIC_EXECUTION]: The file scripts/test_contract.sh executes an embedded Ruby script to perform structural validation of the skill's own YAML fixtures and documentation. This script uses YAML.safe_load with restricted classes and aliases to prevent unsafe deserialization during the check.
  • [SAFE]: The validation script in scripts/test_contract.sh includes an automated check that ensures all files in the skill contain only ASCII characters, which acts as a safeguard against certain types of character-based obfuscation and homoglyph attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 19, 2026, 11:52 AM
Security Audit — agent-trust-hub — ios-xcodegen