ios-design-stack
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill identifies dependencies on Ralph Loop from Anthropics' Claude Code repository and XcodeBuildMCP from Sentry's official GitHub repository. Both organizations are recognized as trusted or well-known technology entities, and the references are handled neutrally as part of the tool's required setup.
- [COMMAND_EXECUTION]: The build and verify steps involve executing standard macOS and iOS development commands, such as
xcodebuild buildandxcrun simctl. These are legitimate operations for the skill's primary purpose of implementing and testing iOS SwiftUI designs. - [INDIRECT_PROMPT_INJECTION]: The pipeline ingests a user-provided design brief which is processed through an autonomous loop. While this represents a surface for indirect injection, the skill incorporates a comprehensive verification checklist—enforcing rules for safe areas, typography hierarchy (SF Pro), and 8pt grid spacing—which serves as a robust boundary to ensure the output remains a valid design.
- [DYNAMIC_EXECUTION]: The skill describes an autonomous iteration loop (via Ralph Loop) that continues until design and build checks pass. This behavior is clearly scoped to the design task and includes a defined iteration limit to prevent runaway execution.
Audit Metadata