kotlin-tooling-cocoapods-spm-migration
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill employs local shell commands, including
grep,find, andsed, to analyze project structure, locate configuration files, and automate the removal of CocoaPods-specific artifacts like Podfiles and podspecs. - [COMMAND_EXECUTION]: It provides a specific command to disable Xcode's 'User Script Sandboxing' (
ENABLE_USER_SCRIPT_SANDBOXING = NO) viased. This is a necessary configuration change for Kotlin Multiplatform projects to allow the Gradle build system to write framework outputs to the project directory during the Xcode build phase. - [EXTERNAL_DOWNLOADS]: The skill instructs the agent to configure the project to fetch official iOS SDKs from reputable GitHub repositories, such as those belonging to Firebase and Google. These sources are considered well-known and trusted in the context of mobile development.
Audit Metadata