limrun-xcode-bazel
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several CLI tools including
lim(vendor CLI),bazelisk(Bazel wrapper), andnpm(for package installation). These are used to manage the remote build environment, initiate builds, and manage background tunnels. - [EXTERNAL_DOWNLOADS]: Instructs the user to install the
limCLI tool globally from the NPM registry. This tool is the primary interface for the vendor's services and is expected for the skill's functionality. - [DATA_EXFILTRATION]: The skill is designed to send source code and build artifacts to the vendor's Remote Build Execution (RBE) workers. This is the intended purpose of the skill and is clearly documented for the user.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing local project workspace files.
- Ingestion points: Reads project configuration from
MODULE.bazel,WORKSPACE, anduser.limrun.bazelrcat the workspace root. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are used when reading these files.
- Capability inventory: The skill can execute shell commands, install software, and manage network tunnels.
- Sanitization: No explicit sanitization or validation of the ingested file content is performed before processing.
Audit Metadata