ios-app-scaffold
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The
scripts/scaffold.pyscript generates aREADME.mdfile for new projects that includes a command to install Tuist via a remote script (curl -Ls https://install.tuist.io | bash). This is the official installation method for Tuist, a well-known tool for managing Xcode projects. - [EXTERNAL_DOWNLOADS]: The generated project configuration in
Project.swiftincludes a dependency on theMockablelibrary, pointing to its public GitHub repository (https://github.com/Kolos65/Mockable.git). This is a standard practice for managing external libraries in iOS development. - [COMMAND_EXECUTION]: The Python script performs routine file system operations, including directory creation and file writing, to set up the project structure based on the user-provided application name and output directory.
Audit Metadata