The Agent Skills Directory

[SAFE]: The skill uses a native Swift package (xcode_spm_setup) to manipulate Xcode project files (.pbxproj). This is a best-practice approach compared to using regex or shell-based text manipulation.
[SAFE]: It utilizes the well-known and trusted tuist/XcodeProj library to ensure structural integrity and security of the project modifications.
[SAFE]: The instructions explicitly forbid the use of Ruby or external gems, reducing the attack surface by limiting the execution environment to native Swift.
[COMMAND_EXECUTION]: The skill requires running swift run to execute its bundled script. This is the intended primary purpose of the skill and is performed locally on the developer's machine using provided source code.
[EXTERNAL_DOWNLOADS]: The script fetches legitimate dependencies (like XcodeProj and AEXML) from official GitHub repositories during the build process, which is standard behavior for Swift Package Manager.

xcode-project-setup