xcodebuildmcp-docs-release-review
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run standard local development tools including
npm run buildandnpx skill-checkto validate documentation and release artifacts. It also executes a project-specific scriptscripts/generate-github-release-notes.mjsfor release note verification. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves reading content from external Markdown files (
README.md,CHANGELOG.md) and project scripts. While this ingestion represents a theoretical attack surface where untrusted text could influence agent behavior, the risk is negligible due to the skill's specific constraints for consistency checking and the context of repository maintenance. - Ingestion points: Reads
README.md,CHANGELOG.md, and content underxcodebuildmcp.com/app/docs/_content/**. - Boundary markers: None present.
- Capability inventory: Local execution of
npm,node, andnpxtools. - Sanitization: None present.
Audit Metadata