codex-plusplus-ios-simulator-tweak

Fail

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: HIGHPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The installation documentation includes instructions to execute sudo xcode-select, which grants administrative privileges to modify system-level Xcode configurations.
  • [EXTERNAL_DOWNLOADS]: The skill requires cloning an external repository from a third-party source (github.com/b-nnett/codex-plusplus-ios-simulator.git) to install its core components.
  • [DYNAMIC_EXECUTION]: The tweak performs runtime compilation of Swift and Objective-C source files (sim-capture.swift and sim-input.m) into executable binaries located in the user's cache directory.
  • [COMMAND_EXECUTION]: The skill utilizes child_process.execSync to execute shell commands (xcrun simctl) with string-interpolated arguments for simulator management operations like booting, shutdown, and device enumeration.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 16, 2026, 03:57 AM