asc-xcode-build
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of various shell commands using the
ascCLI andxcodebuildto manage the iOS/macOS application lifecycle, including versioning, compilation, and distribution. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local project sources, such as
.xcodeprojfiles,xcconfigsettings, and Swift packages, to resolve build configurations and version numbers. - Ingestion points: Project directories,
.xcodeprojfiles, and recursively includedxcconfigfiles are read by theasc xcode versionandasc builds compilecommands. - Boundary markers: The instructions do not specify explicit boundary markers or "ignore" instructions for the agent when parsing these external configuration files.
- Capability inventory: The skill possesses the capability to execute shell commands and write to the filesystem (e.g., updating version numbers or exporting artifacts) based on project settings.
- Sanitization: No specific sanitization or validation logic is detailed for the metadata extracted from the project files before it is used in subsequent command arguments.
- [EXTERNAL_DOWNLOADS]: The documentation references the official
App-Store-Connect-CLIrepository on GitHub for toolchain setup, SDK constraints, and portable build documentation.
Audit Metadata