audit-xcode-security-settings
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill enforces a secure workflow by generating a local plan file (
xcode-security-audit-plan.md) that the user must review and approve before any project modifications occur. - [SAFE]: It utilizes specialized, restricted tools (such as
XcodeUpdateandUpdateTargetBuildSetting) to interact with project files, minimizing the use of generic shell commands and preventing unauthorized file system access. - [SAFE]: The provided Python script (
scripts/filter_build_settings.py) is used for local data filtering and does not contain any remote network calls, obfuscation, or dynamic code execution vulnerabilities. - [SAFE]: The instructions and reference materials align with industry best practices for macOS and iOS application hardening, such as enabling Pointer Authentication and Hardened Runtime entitlements.
Audit Metadata