xcode-preview-capture
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell scripts (
scripts/previewandsim-manager.sh) to manage the iOS Simulator and perform build operations. These scripts are accessed via thePREVIEW_BUILD_PATHenvironment variable, which is expected to point to the repository root. - [PROMPT_INJECTION]: The skill identifies an indirect prompt injection surface because it processes external Swift files for visual analysis and rendering. * Ingestion points: Swift source code files passed as arguments to the preview command. * Boundary markers: None present; the skill does not use delimiters or instructions to isolate the file content from the agent's logic. * Capability inventory: Executes local scripts, interacts with the Xcode build system, and manages the iOS simulator environment. * Sanitization: No sanitization or content validation of the Swift files is implemented in the described workflow.
Audit Metadata