xcode-sync
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands and scripts to perform its primary function of managing system software.
- It executes local scripts (
scripts/xcode-host-inventory.sh) and remote commands via SSH to gather host inventory and manage installations. - It utilizes
sudo -nfor operations requiring administrative privileges, such as moving applications to/Applicationsand accepting Xcode licenses. - Mitigation: The skill explicitly instructs against allowing local shell expansion of remote variables and enforces signature verification (
pkgutil --check-signatureandcodesign --verify) before executing or installing software, which significantly reduces the risk of unauthorized code execution.
Audit Metadata