convoai-ios-workflow
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several local repository scripts and standard developer tools to automate iOS development and validation tasks. Findings include:
- Local Repository Scripts: Execution of scripts within the
scripts/directory, such aspreflight_ios_logic_ut.sh,run_ios_logic_ut.sh,ios_focused_test_fast.sh, andios_feature_validation.shto manage environment setup and test runs. - Build and Test Tooling: Use of
xcodebuild(andXcodeBuildMCPintegrations) for compiling and running unit tests on the iOS workspace. - Repository Analysis: Use of
git diff,git diff --stat, andrg(ripgrep) to analyze changes and search code. - Security Tooling: The skill explicitly references running
gitleaksto check for secrets in staged files as part of the validation workflow.
Audit Metadata