asc-xcode-build

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates the execution of various shell commands using the asc CLI and xcodebuild to manage the iOS/macOS application lifecycle, including versioning, compilation, and distribution.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local project sources, such as .xcodeproj files, xcconfig settings, and Swift packages, to resolve build configurations and version numbers.
  • Ingestion points: Project directories, .xcodeproj files, and recursively included xcconfig files are read by the asc xcode version and asc builds compile commands.
  • Boundary markers: The instructions do not specify explicit boundary markers or "ignore" instructions for the agent when parsing these external configuration files.
  • Capability inventory: The skill possesses the capability to execute shell commands and write to the filesystem (e.g., updating version numbers or exporting artifacts) based on project settings.
  • Sanitization: No specific sanitization or validation logic is detailed for the metadata extracted from the project files before it is used in subsequent command arguments.
  • [EXTERNAL_DOWNLOADS]: The documentation references the official App-Store-Connect-CLI repository on GitHub for toolchain setup, SDK constraints, and portable build documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 06:53 AM