build-iphone-apps

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of Apple's developer CLI tools to facilitate the full application lifecycle. Key operations include xcodebuild for compilation and testing, xcrun simctl for iOS simulator management, and sips/ImageMagick for asset generation.
  • [EXTERNAL_DOWNLOADS]: The documentation guides the user to install several industry-standard third-party development utilities via the Homebrew package manager. These include fastlane for CI/CD automation, mitmproxy for network inspection, xcbeautify and xcsift for log parsing, and xcodegen for project file generation.
  • [INDIRECT_PROMPT_INJECTION]: An attack surface exists for indirect prompt injection because the agent is instructed to ingest and process data from external sources that could contain malicious instructions.
  • Ingestion points: Build logs (parsed via xcsift), simulator runtime logs (log stream), and live network traffic (monitored via mitmproxy) in references/cli-observability.md.
  • Boundary markers: None are explicitly defined in the provided command-line instructions.
  • Capability inventory: The skill has significant capabilities including full shell command execution, file system modifications, and network monitoring.
  • Sanitization: While the skill uses structured output formats (JSON) to facilitate agent parsing, it does not explicitly mention LLM-specific sanitization techniques for raw log ingestion.
  • [PRIVILEGE_ESCALATION]: The project setup guide in references/cli-workflow.md includes a requirement to use sudo xcode-select to configure the system-wide developer path. This is a standard and expected administrative operation in the context of setting up an iOS development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 01:24 PM