xcode-archive-release
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to automate the release workflow for iOS and macOS applications. It uses legitimate system utilities and follows standard development practices.
- [COMMAND_EXECUTION]: The script
xcode-release.shexecutes several command-line tools includingxcodebuild,git,sed, andPlistBuddy. These executions are necessary for the skill's operation and are performed using variables that are properly quoted to prevent basic shell injection. - [DATA_EXFILTRATION]: Network activity is restricted to
git pushfor creating release tags andxcodebuildfor uploading the generated archive to App Store Connect. These are documented and expected behaviors for a release automation tool. - [EXTERNAL_DOWNLOADS]: No external scripts or packages are downloaded from the internet during execution. All operations rely on tools already present on a standard macOS development environment.
Audit Metadata