The Agent Skills Directory

[COMMAND_EXECUTION]: The provided asset ci_pre_xcodebuild.sh is a shell script intended for execution within an Xcode Cloud CI environment. It incorporates defensive programming practices, including non-empty path validation and canonical path resolution (using pwd -P) to ensure that file operations (like rm -rf and mkdir -p) are strictly confined within the repository root, preventing path traversal vulnerabilities.
[EXTERNAL_DOWNLOADS]: The skill references established documentation from Apple and the well-known open-source tool XcodeGen. It emphasizes deterministic tool acquisition and avoids providing instructions that would lead to unverified or mutable third-party software installation during the build process.
[SAFE]: The repository includes a security-conscious test suite in scripts/test_skill_contract.sh. This script automatically audits the skill's own source code for 'unsafe defaults'—such as hardcoded GITHUB_TOKEN strings or risky shell commands—demonstrating a proactive approach to maintaining a secure codebase.
[CREDENTIALS_UNSAFE]: The documentation provides explicit guidance on credential safety, instructing users to keep logs free of secrets and to avoid placing credentials in environment dumps, remote URLs, or command arguments.

xcode-cloud