xcode-dev-loop
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill utilizes standard Apple development utilities (
xcodebuild,xcrun,simctl,PlistBuddy) for their intended purposes without any malicious redirection or privilege escalation.\n- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that ingests external data from build logs and simulator metadata.\n - Ingestion points: Data is read from
xcodebuildlogs, status files, and accessibility hierarchies (SKILL.md).\n - Boundary markers: No specific boundary markers or 'ignore' instructions are provided for processed logs.\n
- Capability inventory: The skill enables shell command execution (
xcodebuild,xcrun) and file system writes (logs,.statusfiles).\n - Sanitization: The instructions do not specify sanitization for the content of build logs or accessibility labels before processing.
Audit Metadata