macos-build-run-debug
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill creates and executes a local shell script (
script/build_and_run.sh) to automate the build and launch process for macOS projects, which is the primary intended function for a developer workflow. - [COMMAND_EXECUTION]: Utilizes standard system utilities including
xcodebuild,swift,git,pkill,pgrep,open, andlog streamfor project discovery, process management, and log inspection. - [COMMAND_EXECUTION]: Modifies the local filesystem to create build artifacts (dist/), write configuration files (Info.plist), and manage project state.
- [COMMAND_EXECUTION]: Presents an indirect instruction injection surface where project metadata, such as scheme or target names, is interpolated into generated scripts. Ingestion points: Scheme names from
xcodebuild -listor project discovery. Boundary markers: Names are wrapped in double quotes in script templates. Capability inventory: File writing and shell script execution. Sanitization: Relies on standard shell variable quoting rather than explicit input filtering.
Audit Metadata