audit-xcode-security-settings
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill reads untrusted project files such as
.pbxproj,.xcconfig, and.entitlementsto inform its security audit and decision-making process. - Ingestion points: Reads various project configuration files and existing
xcode-security-settings.mddecision documents viaXcodeRead. - Boundary markers: Content from these untrusted files is interpolated into the agent's context without explicit delimiters or instructions to ignore embedded commands.
- Capability inventory: The skill can modify project settings through
UpdateProjectBuildSettingandUpdateTargetBuildSetting, and execute shell commands viaplutil. - Sanitization: No specific sanitization or validation of the project file content is defined in the instructions.
- [COMMAND_EXECUTION]: Local Shell Command Execution. The skill uses the
plutilutility for property list manipulation and workspace configuration, as well asgitfor repository management when standard tools are insufficient. These operations are intended for project hardening and are clearly documented in the workflow.
Audit Metadata