swiftlint

Warn

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill recommends the SwiftLintBuildToolPlugin from the SimplyDanny/SwiftLintPlugins GitHub repository. This plugin executes code during the build process in Xcode or Swift Package Manager environments. As this is a third-party repository not included in the trusted vendor list, it represents an external code dependency.
  • [EXTERNAL_DOWNLOADS]: The documentation includes instructions for several external download vectors:
  • Fetching configuration files from remote HTTPS URLs using the parent_config key.
  • Downloading pre-built tool binaries from GitHub releases.
  • Using Docker images hosted on the GitHub Container Registry (ghcr.io/realm/swiftlint).
  • [COMMAND_EXECUTION]: The skill provides numerous shell scripts for integration with Xcode Build Phases and CI/CD pipelines. These include:
  • Automated tool installation via brew, mint, and pod.
  • Direct invocation of the swiftlint CLI in build scripts.
  • Commands designed to bypass manual security prompts in automated environments, specifically xcodebuild -skipPackagePluginValidation -skipMacroValidation.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 16, 2026, 08:52 PM