mobilebuildmcp-rendering-streaming-review
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to reference architectural documentation hosted at
xcodebuildmcp.comto guide the review process. - [COMMAND_EXECUTION]: Includes standard development commands for validating code changes, specifically
npm test,npm run test:snapshots,npm run typecheck, andnpx skill-check. - [INDIRECT_PROMPT_INJECTION]: The skill processes external documentation and local source files, which serves as a potential surface for indirect instructions. This is a low-risk finding associated with the skill's primary function of code and documentation review.
- Ingestion points: Reads documentation from
xcodebuildmcp.comand project files in thesrc/directory (SKILL.md). - Boundary markers: Absent; the skill does not define specific delimiters or instructions to ignore embedded content in analyzed files.
- Capability inventory: Can execute shell commands via
npmandnpx(SKILL.md). - Sanitization: None; the skill does not specify filtering or validation for the content of the files it inspects.
Audit Metadata