swiftlint
Warn
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill recommends the
SwiftLintBuildToolPluginfrom theSimplyDanny/SwiftLintPluginsGitHub repository. This plugin executes code during the build process in Xcode or Swift Package Manager environments. As this is a third-party repository not included in the trusted vendor list, it represents an external code dependency. - [EXTERNAL_DOWNLOADS]: The documentation includes instructions for several external download vectors:
- Fetching configuration files from remote HTTPS URLs using the
parent_configkey. - Downloading pre-built tool binaries from GitHub releases.
- Using Docker images hosted on the GitHub Container Registry (
ghcr.io/realm/swiftlint). - [COMMAND_EXECUTION]: The skill provides numerous shell scripts for integration with Xcode Build Phases and CI/CD pipelines. These include:
- Automated tool installation via
brew,mint, andpod. - Direct invocation of the
swiftlintCLI in build scripts. - Commands designed to bypass manual security prompts in automated environments, specifically
xcodebuild -skipPackagePluginValidation -skipMacroValidation.
Audit Metadata