xcode-workflows

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues were identified in this skill. All analyzed content consists of documentation for standard iOS development workflows.
  • [COMMAND_EXECUTION]: The skill provides instructions for performing iOS build operations using a specialized MCP tool (execute_xcode_command). It specifically discourages the use of direct shell commands (e.g., xcodebuild), which reduces the risk of shell injection or unauthorized command execution by enforcing a structured tool interface.
  • [DATA_EXFILTRATION]: There are no network operations, external downloads, or attempts to access sensitive system files (such as SSH keys or AWS credentials) detected in the instructions.
  • [PROMPT_INJECTION]: The skill uses instructional emphasis (e.g., "CRITICAL: Always Use MCP Tools First") to guide the agent toward safe tool usage patterns. This is benign guidance for task completion and does not attempt to bypass AI safety filters or override core system instructions.
  • [CREDENTIALS_UNSAFE]: No hardcoded secrets, API keys, or private tokens were found. Placeholders like TEAM_ID_HERE are used appropriately in examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 10:28 PM