xcodebuildmcp-test-boundary-review
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard development commands including
npm test,npm run typecheck, and specialized snapshot/fixture tests to validate changes. - [COMMAND_EXECUTION]: The skill includes a validation step using
npx skill-check, which is a utility for verifying the integrity of the agent skill itself within the project directory. - [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests content from external files like
package.jsonand test files in thesrcandscriptsdirectories. However, it provides clear guardrails and constraints to limit the agent's scope to review-only by default.
Audit Metadata