build-macos-apps
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install several developer tools via Homebrew and RubyGems, including
xcodegen,xcbeautify,mitmproxy,xcpretty, and a third-party toolxcsiftfrom theldomaradzki/xcsiftrepository. It also references well-known frameworks like Sparkle for application updates.- [COMMAND_EXECUTION]: The workflows involve execution of system commands for building and testing (xcodebuild), process management (Process().run()), and system observability (log stream,leaks,spindump). It also includes instructions for modifying system-wide proxy settings usingnetworksetupto enable network traffic inspection during debugging.- [PRIVILEGE_ESCALATION]: The CLI workflow guide includes the use ofsudo xcode-selectto configure the system-wide path for the Xcode developer directory, and mentions that accessing system crash logs requiressudoprivileges.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest high-level user requirements and transform them into executable code and project structures. - Ingestion points: User descriptions provided during the intake process and feature definition stages in
SKILL.mdandworkflows/build-new-app.md. - Boundary markers: The skill relies on natural language instructions and does not implement specific boundary markers or delimiters for user-provided content.
- Capability inventory: The skill has access to extensive system capabilities including project generation (
xcodegen), building (xcodebuild), network configuration (networksetup), and binary signing (codesign,notarytool). - Sanitization: The instructions do not specify validation or sanitization routines for user-provided identifiers (e.g., project names, bundle IDs) or feature descriptions.
Audit Metadata