asc-xcode-build
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the 'asc' command-line utility and 'xcodebuild' to manage application versions, perform compilations, and handle App Store Connect uploads. These operations are the stated primary purpose of the skill.
- [INDIRECT_PROMPT_INJECTION]: The skill reads and modifies project metadata, including '.xcodeproj', '.xcworkspace', '.xcconfig', and '.plist' files. While these are external inputs, the operations are standard for a build automation tool and are scoped to the project environment.
- [DATA_EXFILTRATION]: The skill interacts with App Store Connect for authentication and build uploads. It uses placeholders for sensitive identifiers like 'APP_ID' and 'TEAM_ID', and does not demonstrate unauthorized data collection or exfiltration to non-standard domains.
Audit Metadata