xcode-makefiles

Pass

Audited by Gen Agent Trust Hub on May 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is to install a local build toolkit into a user's Xcode project directory. All installation logic is handled locally via install.sh and a Python templating script.
  • [SAFE]: No external network dependencies or downloads were identified. The scripts rely exclusively on standard system tools such as xcodebuild, xcrun, git, and osascript.
  • [SAFE]: The xcbuild.sh script implements environment isolation by redirecting HOME, TMPDIR, and various cache paths to the project's internal build/ directory. This prevents build side-effects on the host system and is a recommended practice.
  • [SAFE]: The use of osascript in move_to_trash.sh is a standard method for interacting with the macOS Finder to safely delete files, rather than using rm -rf directly.
  • [SAFE]: Analysis of the Python logic in resolve_sim_destination.sh and render_template.py confirms they only perform local processing of simulator metadata and file system operations without any malicious intent or obfuscation.
Audit Metadata
Risk Level
SAFE
Analyzed
May 10, 2026, 11:22 AM
Security Audit — agent-trust-hub — xcode-makefiles