swiftlint
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the use of the
SimplyDanny/SwiftLintPluginsrepository from GitHub as the primary integration method for Swift projects. - [COMMAND_EXECUTION]: The skill provides various shell scripts for integration into Xcode Build Phases and CI pipelines, including commands to install SwiftLint via Homebrew and execute it with specific flags like
--strictand--fix. - [PRIVILEGE_ESCALATION]: The skill instructs users to use the
-skipPackagePluginValidationand-skipMacroValidationflags withxcodebuildin CI environments. This explicitly bypasses standard security checks and validation prompts for third-party package plugins and macros. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data including Swift source code, compiler logs (e.g.,
xcodebuild.log), and remote YAML configuration files. There are no boundary markers or sanitization steps mentioned for this untrusted data, and the skill has the capability to execute commands based on these inputs. - Ingestion points: Swift source files, compiler logs (xcodebuild.log/swift-build.log), and remote .swiftlint.yml configuration files.
- Boundary markers: Absent.
- Capability inventory: Execution of
swiftlintCLI commands and custom shell scripts in Xcode and CI environments. - Sanitization: Absent.
Audit Metadata