xcode-build-device
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute
emacsclient --eval, which runs Emacs Lisp code to manage Xcode builds. - [COMMAND_EXECUTION]: It dynamically loads executable code from an external file located in a sibling directory (
xcode-shared/agent-skill-xcode.el). This file is a shared vendor resource used across multiple related skills. - [COMMAND_EXECUTION]: The skill interpolates the current working directory (
$(pwd)) directly into the shell command string. While standard for project-based tools, this creates an injection surface if the environment contains maliciously crafted directory names.
Audit Metadata