debug-generated-project
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches source code from the official Tuist GitHub repository to verify fixes against the main branch.
- [COMMAND_EXECUTION]: Utilizes standard development and diagnostic commands including
swift build,xcodebuild,zip, andxcrun simctlfor project verification and simulator management. - [DYNAMIC_EXECUTION]: Compiles the downloaded Tuist source code and executes the resulting debug binary locally to test against reproduction projects.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided project manifests and source code.
- Ingestion points: Processes
Project.swift,Tuist.swift, and source code excerpts provided by users inSKILL.md(Step 1). - Boundary markers: None present; the skill treats user input as the definition for reproduction files.
- Capability inventory: Includes code compilation, execution of locally built binaries, build system interaction (
xcodebuild), and simulator control (simctl). - Sanitization: No explicit sanitization or validation of the Swift manifest content is performed, as the skill's purpose is to reproduce the user's environment exactly.
Audit Metadata