xcode-build-fixer
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes optimization instructions from an external file,
.build-benchmark/optimization-plan.md. - Ingestion points: The markdown plan file and direct developer input.
- Boundary markers: None identified; the skill executes any checked item in the list.
- Capability inventory: Modification of project files (pbxproj, swift, package.swift) and execution of shell commands (xcodebuild, python3, git).
- Sanitization: No sanitization or validation of the plan content is mentioned.
- [COMMAND_EXECUTION]: The skill executes
xcodebuild,python3 scripts/benchmark_builds.py, andgit ls-remote --tags <url>. These commands are integral to its benchmarking and resolution functions but represent an interface to the underlying operating system and network. - [DYNAMIC_EXECUTION]: The skill modifies Xcode build script phases within the
project.pbxprojfile. While intended to add performance guards and file declarations, this capability involves programmatically altering executable build logic.
Audit Metadata