codex-plusplus-ios-simulator-tweak
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The installation documentation includes instructions to execute
sudo xcode-select, which grants administrative privileges to modify system-level Xcode configurations. - [EXTERNAL_DOWNLOADS]: The skill requires cloning an external repository from a third-party source (
github.com/b-nnett/codex-plusplus-ios-simulator.git) to install its core components. - [DYNAMIC_EXECUTION]: The tweak performs runtime compilation of Swift and Objective-C source files (
sim-capture.swiftandsim-input.m) into executable binaries located in the user's cache directory. - [COMMAND_EXECUTION]: The skill utilizes
child_process.execSyncto execute shell commands (xcrun simctl) with string-interpolated arguments for simulator management operations like booting, shutdown, and device enumeration.
Recommendations
- AI detected serious security threats
Audit Metadata