software-ios-native
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches and executes the
xcodebuildmcppackage from the npm registry usingnpx. This tool is provided by Sentry, which is a well-known and established technology organization. - [REMOTE_CODE_EXECUTION]: Executes the
xcodebuildmcputility at runtime to facilitate agent-assisted development workflows. The execution is targeted at a specific, reputable package for iOS development automation. - [COMMAND_EXECUTION]: Utilizes standard Apple CLI tools such as
xcodebuild,simctl, andxcresulttoolfor project building, testing, and simulator management. It also references local project scripts for project generation and local development environment control. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied feature requests and implementation goals. While this presents a surface for indirect injection, the skill mitigates risk by providing structured templates for requests and scoping the agent's capabilities to standard development and validation tasks within the local environment.
Audit Metadata