xcodebuildmcp-rendering-streaming-review
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for running standard development commands such as
npm test,npm run test:snapshots,npm run typecheck, andnpx skill-checkto validate code changes. - [EXTERNAL_DOWNLOADS]: Validation involves
npx, which fetches packages from the NPM registry. It also references documentation content on thexcodebuildmcp.comdomain related to the project architecture. - [PROMPT_INJECTION]: The skill functions as a code review tool and analyzes project source files and documentation, creating a surface for potential indirect prompt injection from untrusted data.
- Ingestion points: Local source files in the
src/directory and documentation files onxcodebuildmcp.comlisted for inspection. - Boundary markers: Absent. The skill does not provide specific instructions to the agent to ignore any embedded directives within the analyzed files.
- Capability inventory: Access to shell execution through
npmandnpxtools. - Sanitization: No explicit sanitization or content filtering is specified for the reviewed materials.
Audit Metadata