xcode-archive-release

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is to automate the release workflow for iOS and macOS applications. It uses legitimate system utilities and follows standard development practices.
  • [COMMAND_EXECUTION]: The script xcode-release.sh executes several command-line tools including xcodebuild, git, sed, and PlistBuddy. These executions are necessary for the skill's operation and are performed using variables that are properly quoted to prevent basic shell injection.
  • [DATA_EXFILTRATION]: Network activity is restricted to git push for creating release tags and xcodebuild for uploading the generated archive to App Store Connect. These are documented and expected behaviors for a release automation tool.
  • [EXTERNAL_DOWNLOADS]: No external scripts or packages are downloaded from the internet during execution. All operations rely on tools already present on a standard macOS development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 04:01 PM