build-macos-apps

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install several developer tools via Homebrew and RubyGems, including xcodegen, xcbeautify, mitmproxy, xcpretty, and a third-party tool xcsift from the ldomaradzki/xcsift repository. It also references well-known frameworks like Sparkle for application updates.- [COMMAND_EXECUTION]: The workflows involve execution of system commands for building and testing (xcodebuild), process management (Process().run()), and system observability (log stream, leaks, spindump). It also includes instructions for modifying system-wide proxy settings using networksetup to enable network traffic inspection during debugging.- [PRIVILEGE_ESCALATION]: The CLI workflow guide includes the use of sudo xcode-select to configure the system-wide path for the Xcode developer directory, and mentions that accessing system crash logs requires sudo privileges.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest high-level user requirements and transform them into executable code and project structures.
  • Ingestion points: User descriptions provided during the intake process and feature definition stages in SKILL.md and workflows/build-new-app.md.
  • Boundary markers: The skill relies on natural language instructions and does not implement specific boundary markers or delimiters for user-provided content.
  • Capability inventory: The skill has access to extensive system capabilities including project generation (xcodegen), building (xcodebuild), network configuration (networksetup), and binary signing (codesign, notarytool).
  • Sanitization: The instructions do not specify validation or sanitization routines for user-provided identifiers (e.g., project names, bundle IDs) or feature descriptions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 12:42 PM