limrun-xcode-bazel

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the lim CLI tool globally using the Node Package Manager (npm install --global lim). This tool is provided by the skill vendor and is necessary for managing the remote build environments and simulators described in the documentation.- [COMMAND_EXECUTION]: The skill documentation includes several commands to be executed by the user via the lim CLI and bazelisk. These commands manage remote build stacks, establish network tunnels for RBE, create and attach iOS simulators, and perform build and upload operations. All commands are standard for the described service and are executed with the user's explicit interaction.- [INDIRECT_PROMPT_INJECTION]: The skill interacts with project-specific files such as MODULE.bazel, WORKSPACE, and .bazelversion to configure the build environment. Ingestion points: workspace root configuration files. Boundary markers: The skill relies on standard Bazel workspace structures and does not implement specific sanitization markers for user project content. Capability inventory: Command execution via lim and bazelisk subprocesses. Sanitization: Build commands are executed within the context of the user's project and the remote execution environment. The attack surface is typical for build-system integrations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 06:23 AM
Security Audit — agent-trust-hub — limrun-xcode-bazel