mobilebuildmcp-runtime-boundary-review
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection by ingesting untrusted data from multiple sources.
- Ingestion points: Reads external documentation from
xcodebuildmcp.comand local project files (source code and YAML manifests). - Boundary markers: None identified in the instructions to separate untrusted content from agent instructions.
- Capability inventory: The skill can execute shell commands via
npm test,npm run typecheck, andnpx skill-check. - Sanitization: No evidence of sanitization or validation of the ingested content before it is processed by the agent.
Audit Metadata