mobile-dev-setup

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill instructs the agent to execute administrative commands using sudo to configure the active Xcode developer directory (xcode-select -s), accept license agreements (xcodebuild -license accept), and perform initial component installation (xcodebuild -runFirstLaunch). These actions are required for the intended purpose and are preceded by explicit notes to gain user consent.
  • [PERSISTENCE_MECHANISMS]: The workflow modifies the user's ~/.zshrc file to set ANDROID_HOME and update the PATH variable. This ensures that Android development tools remain available across terminal sessions, a standard procedure for this type of setup.
  • [EXTERNAL_DOWNLOADS]: The skill uses the Homebrew package manager to download and install several third-party toolchains, including xcodes, android-studio, watchman, cocoapods, and the temurin JDK. It also uses npx to execute the React Native doctor tool. Most of these resources originate from well-known or trusted organizations (e.g., Google, Facebook/Meta, Eclipse Foundation).
  • [DYNAMIC_EXECUTION]: Executes a local shell script (scripts/check.sh) to verify the installation status. The script performs read-only checks of system configuration and tool versions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 06:29 PM
Security Audit — agent-trust-hub — mobile-dev-setup