mobile-dev-setup
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs the agent to execute administrative commands using
sudoto configure the active Xcode developer directory (xcode-select -s), accept license agreements (xcodebuild -license accept), and perform initial component installation (xcodebuild -runFirstLaunch). These actions are required for the intended purpose and are preceded by explicit notes to gain user consent. - [PERSISTENCE_MECHANISMS]: The workflow modifies the user's
~/.zshrcfile to setANDROID_HOMEand update thePATHvariable. This ensures that Android development tools remain available across terminal sessions, a standard procedure for this type of setup. - [EXTERNAL_DOWNLOADS]: The skill uses the Homebrew package manager to download and install several third-party toolchains, including
xcodes,android-studio,watchman,cocoapods, and thetemurinJDK. It also usesnpxto execute the React Native doctor tool. Most of these resources originate from well-known or trusted organizations (e.g., Google, Facebook/Meta, Eclipse Foundation). - [DYNAMIC_EXECUTION]: Executes a local shell script (
scripts/check.sh) to verify the installation status. The script performs read-only checks of system configuration and tool versions.
Audit Metadata