xcodebuildmcp-cli
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
xcodebuildmcptool from official package registries using Homebrew (brew install xcodebuildmcp) and npm (npm install -g xcodebuildmcp@latest). These resources originate from the vendor's repository. - [COMMAND_EXECUTION]: The skill executes local commands using the
xcodebuildmcpCLI to manage builds, tests, and debugging for iOS, macOS, and other Apple platforms. - [INDIRECT_PROMPT_INJECTION]: The skill processes output from the CLI tool which represents an attack surface for indirect prompt injection if the project being analyzed contains malicious content that manifests in the tool's output.
- Ingestion points: Terminal output from
xcodebuildmcp toolsand--helpcommands (SKILL.md). - Boundary markers: None specified to differentiate tool output from agent instructions.
- Capability inventory: The
xcodebuildmcptool facilitates project discovery, UI automation, and build execution. - Sanitization: No explicit sanitization or filtering of the CLI output is described.
Audit Metadata