xcode-sync
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell scripts and system commands both locally and on remote hosts using SSH to manage software deployment and system audits.
- Evidence: Use of
ssh -o RequestTTY=no -o RemoteCommand=none HOST 'bash -s' < skills/xcode-sync/scripts/xcode-host-inventory.shto execute local inventory logic on remote nodes. - [PRIVILEGE_ESCALATION]: The skill utilizes
sudo -nto perform administrative actions such as accepting Xcode software licenses and running initial setup tasks. - Evidence:
sudo env DEVELOPER_DIR="$app/Contents/Developer" xcodebuild -license acceptandsudo env DEVELOPER_DIR="$app/Contents/Developer" xcodebuild -runFirstLaunchinSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from local configuration files and system utility outputs to make operational decisions.
- Ingestion points: Reads host lists from
~/Projects/manager/computers.yamland network reachability fromtailscale status --json. - Boundary markers: None identified for the ingested configuration data or Tailscale JSON output.
- Capability inventory: Includes remote execution via SSH, file synchronization via rsync, and root-level operations via sudo.
- Sanitization: The skill instructions recommend using single-quoted remote scripts to prevent local shell expansion, but lacks formal validation for the ingested YAML/JSON data.
Audit Metadata