migrating-to-tuist-generated-projects
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill involves processing existing Xcode project files (.xcodeproj, .pbxproj) to extract configuration data. This represents an attack surface where maliciously crafted project files could attempt to influence the migration output. This is a low-risk concern inherent to the primary purpose of the migration tool.
- [COMMAND_EXECUTION]: The skill uses standard local development commands including
tuist,xcodebuild, andxcrun. These are used for their intended purposes of project generation, building, and simulator management within the user's local environment.
Audit Metadata