limrun-xcode-bazel
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
limCLI tool globally using the Node Package Manager (npm install --global lim). This tool is provided by the skill vendor and is necessary for managing the remote build environments and simulators described in the documentation.- [COMMAND_EXECUTION]: The skill documentation includes several commands to be executed by the user via thelimCLI andbazelisk. These commands manage remote build stacks, establish network tunnels for RBE, create and attach iOS simulators, and perform build and upload operations. All commands are standard for the described service and are executed with the user's explicit interaction.- [INDIRECT_PROMPT_INJECTION]: The skill interacts with project-specific files such asMODULE.bazel,WORKSPACE, and.bazelversionto configure the build environment. Ingestion points: workspace root configuration files. Boundary markers: The skill relies on standard Bazel workspace structures and does not implement specific sanitization markers for user project content. Capability inventory: Command execution vialimandbazelisksubprocesses. Sanitization: Build commands are executed within the context of the user's project and the remote execution environment. The attack surface is typical for build-system integrations.
Audit Metadata