skills/thienqo/ios-skills/swiftlint/Gen Agent Trust Hub

swiftlint

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends the use of the SimplyDanny/SwiftLintPlugins repository from GitHub as the primary integration method for Swift projects.
  • [COMMAND_EXECUTION]: The skill provides various shell scripts for integration into Xcode Build Phases and CI pipelines, including commands to install SwiftLint via Homebrew and execute it with specific flags like --strict and --fix.
  • [PRIVILEGE_ESCALATION]: The skill instructs users to use the -skipPackagePluginValidation and -skipMacroValidation flags with xcodebuild in CI environments. This explicitly bypasses standard security checks and validation prompts for third-party package plugins and macros.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data including Swift source code, compiler logs (e.g., xcodebuild.log), and remote YAML configuration files. There are no boundary markers or sanitization steps mentioned for this untrusted data, and the skill has the capability to execute commands based on these inputs.
  • Ingestion points: Swift source files, compiler logs (xcodebuild.log/swift-build.log), and remote .swiftlint.yml configuration files.
  • Boundary markers: Absent.
  • Capability inventory: Execution of swiftlint CLI commands and custom shell scripts in Xcode and CI environments.
  • Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 12:02 PM