limrun-xcode-bazel

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes several CLI tools including lim (vendor CLI), bazelisk (Bazel wrapper), and npm (for package installation). These are used to manage the remote build environment, initiate builds, and manage background tunnels.
  • [EXTERNAL_DOWNLOADS]: Instructs the user to install the lim CLI tool globally from the NPM registry. This tool is the primary interface for the vendor's services and is expected for the skill's functionality.
  • [DATA_EXFILTRATION]: The skill is designed to send source code and build artifacts to the vendor's Remote Build Execution (RBE) workers. This is the intended purpose of the skill and is clearly documented for the user.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing local project workspace files.
  • Ingestion points: Reads project configuration from MODULE.bazel, WORKSPACE, and user.limrun.bazelrc at the workspace root.
  • Boundary markers: No specific boundary markers or instructions to ignore embedded commands are used when reading these files.
  • Capability inventory: The skill can execute shell commands, install software, and manage network tunnels.
  • Sanitization: No explicit sanitization or validation of the ingested file content is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 02:31 AM
Security Audit — agent-trust-hub — limrun-xcode-bazel