skills/limchihi/harness/xcode/Gen Agent Trust Hub

xcode

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/xcode.py uses the subprocess.run function to execute npm exec. This is used to run the mcporter utility, which manages communication with Xcode's underlying tools. The command arguments are constructed using sanitized inputs from the tool's CLI.
  • [EXTERNAL_DOWNLOADS]: The skill downloads the mcporter package from the official npm registry at runtime using npm exec --package=mcporter@0.13.11. This is a standard mechanism for utilizing MCP bridging utilities without requiring a global installation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 03:16 PM
Security Audit — agent-trust-hub — xcode