build-iphone-apps
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of Apple's developer CLI tools to facilitate the full application lifecycle. Key operations include
xcodebuildfor compilation and testing,xcrun simctlfor iOS simulator management, andsips/ImageMagickfor asset generation. - [EXTERNAL_DOWNLOADS]: The documentation guides the user to install several industry-standard third-party development utilities via the Homebrew package manager. These include
fastlanefor CI/CD automation,mitmproxyfor network inspection,xcbeautifyandxcsiftfor log parsing, andxcodegenfor project file generation. - [INDIRECT_PROMPT_INJECTION]: An attack surface exists for indirect prompt injection because the agent is instructed to ingest and process data from external sources that could contain malicious instructions.
- Ingestion points: Build logs (parsed via
xcsift), simulator runtime logs (log stream), and live network traffic (monitored viamitmproxy) inreferences/cli-observability.md. - Boundary markers: None are explicitly defined in the provided command-line instructions.
- Capability inventory: The skill has significant capabilities including full shell command execution, file system modifications, and network monitoring.
- Sanitization: While the skill uses structured output formats (JSON) to facilitate agent parsing, it does not explicitly mention LLM-specific sanitization techniques for raw log ingestion.
- [PRIVILEGE_ESCALATION]: The project setup guide in
references/cli-workflow.mdincludes a requirement to usesudo xcode-selectto configure the system-wide developer path. This is a standard and expected administrative operation in the context of setting up an iOS development environment.
Audit Metadata