skip-project-creation
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the installation of the Skip CLI via Homebrew (
brew install skiptools/skip/skip) and Maestro for UI automation (brew install mobile-dev-inc/tap/maestro). Both sources are identified as the vendor's own repository or well-known service providers. - [COMMAND_EXECUTION]: Instructions include the use of
skip init,skip create, andskip checkupcommands for project management. These are vendor-provided CLI tools. It also utilizes standard environment tools likexcrun,emulator, andadbfor managing iOS and Android simulators. - [REMOTE_CODE_EXECUTION]: The skill provides templates for adding remote library dependencies using Swift Package Manager (
https://source.skip.tools/*.git) and Android Gradle (androidx.*,com.google.*,com.airbnb.*). These target vendor-owned or trusted repositories from organizations like Google and Airbnb. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates how to scaffold new projects and append configurations to
Package.swiftandskip.ymlbased on user input. This capability is localized to the development environment and follows standard scaffolding patterns without ingesting untrusted external data.
Audit Metadata