asc-xcode-cloud
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute 'asc' CLI commands to interact with Xcode Cloud. These commands are limited to managing products, workflows, and builds as described in the documentation.
- [CREDENTIALS_UNSAFE]: The documentation mentions the path '~/.asc/AuthKey.p8' for authentication purposes. This is a standard reference to a local file path for App Store Connect API keys and does not involve hardcoded secrets or unsafe credential handling.
- [INDIRECT_PROMPT_INJECTION]: The skill parses output from the 'asc' CLI (specifically 'affordances' in JSON responses) to determine subsequent commands. While this is a data ingestion surface, the interaction is localized to the vendor's tool output and does not demonstrate exploitable patterns.
Audit Metadata