rust-ios-build
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Instructs the agent to use standard development tools including
rustup,cargo,xcodebuild,codesign, and various binary inspection utilities (otool,nm,lipo,vtool,dwarfdump) to manage the build and verification lifecycle. - [INDIRECT_PROMPT_INJECTION]: The skill parses the output of binary analysis tools to verify build artifacts, creating a surface for indirect prompt injection.
- Ingestion points: Command-line output from
otool,nm,lipo, andvtool(SKILL.md). - Boundary markers: Output is processed using
grepand standard unix pipes without explicit delimiters. - Capability inventory: Extensive local command execution and file system access as part of the build pipeline.
- Sanitization: Relies on specific pattern matching against tool outputs.
- [EXTERNAL_DOWNLOADS]: Fetches dependencies and toolchain components using official package managers and registries, including
rustup,cargo, andswift package.
Audit Metadata