ios-workflow-executor

Warn

Audited by Gen Agent Trust Hub on Feb 24, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands using xcrun simctl for simulator lifecycle management, including creation, booting, and deletion.
  • [COMMAND_EXECUTION]: It invokes build and test tools such as npm, npx playwright, and npx cypress to validate application behavior and verify fixes.
  • [COMMAND_EXECUTION]: Version control operations are performed using git and gh CLI tools to automate the creation of branches and pull requests.
  • [EXTERNAL_DOWNLOADS]: The skill connects to GitHub's official services for repository management and pull request creation.
  • [EXTERNAL_DOWNLOADS]: External information is gathered through a web search tool to inform UI/UX evaluations against iOS Human Interface Guidelines.
  • [PROMPT_INJECTION]: The skill processes workflow steps from /workflows/ios-workflows.md and content from web searches, which could contain instructions that influence the agent's behavior during execution.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 24, 2026, 10:28 PM