apple-xcode-workflow
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: A comprehensive analysis of the skill's logic, Python scripts, and shell scripts revealed no malicious patterns, prompt injections, or unauthorized data access.
- [COMMAND_EXECUTION]: The skill utilizes subprocess calls to execute its own internal helper scripts, such as detect_xcode_managed_scope.sh and advisory_cooldown.py. These executions are confined to the skill's local environment for state management and project context detection, using safe list-style argument passing and shlex sanitization.
- [EXTERNAL_DOWNLOADS]: The skill documentation refers to the author's official GitHub repository (gaelic-ghost/apple-dev-skills) and standard developer resources like Apple and Swift documentation sites. These are identified as legitimate vendor resources and well-known services.
Audit Metadata