xcodebuildmcp-test-boundary-review
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches documentation and contribution guidelines from the project-specific domain xcodebuildmcp.com to provide context for test reviews.\n- [COMMAND_EXECUTION]: Instructs the agent to execute standard local validation routines including
npm test,npm run typecheck, andnpx skill-check. These are typical for development workflows and are used here to verify the integrity of the test suite.\n- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it reads external documentation content that is subsequently processed by the agent. \n - Ingestion points: External Markdown files located at
xcodebuildmcp.com/app/docs/_content/testing.mdxandcontributing.mdx. \n - Boundary markers: None specified. \n
- Capability inventory: Local file system read access and command execution via
npmandnpx. \n - Sanitization: No explicit content sanitization or instruction-filtering is defined for the retrieved remote documentation.
Audit Metadata