rust-ios-build

Pass

Audited by Gen Agent Trust Hub on Nov 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: Instructs the agent to use standard development tools including rustup, cargo, xcodebuild, codesign, and various binary inspection utilities (otool, nm, lipo, vtool, dwarfdump) to manage the build and verification lifecycle.
  • [INDIRECT_PROMPT_INJECTION]: The skill parses the output of binary analysis tools to verify build artifacts, creating a surface for indirect prompt injection.
  • Ingestion points: Command-line output from otool, nm, lipo, and vtool (SKILL.md).
  • Boundary markers: Output is processed using grep and standard unix pipes without explicit delimiters.
  • Capability inventory: Extensive local command execution and file system access as part of the build pipeline.
  • Sanitization: Relies on specific pattern matching against tool outputs.
  • [EXTERNAL_DOWNLOADS]: Fetches dependencies and toolchain components using official package managers and registries, including rustup, cargo, and swift package.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 7, 2026, 06:30 AM