Security audit
Security checks for vulnerabilities and agentic risk
This is a local iOS/Xcode cleanup skill, but it can permanently delete developer artifacts and includes automatic simulator cleanup without first asking the user.
Install only if you want an agent to inspect and clean local Xcode/iOS development storage. Before running it, require explicit approval for every deletion, including unavailable simulators/runtimes, and review archive deletion carefully because archives may contain important release artifacts.
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
xcrun simctl delete unavailable
**禁止** 直接 `rm -rf ~/Library/Developer/CoreSimulator/Devices/<UUID>/`，必须用 `simctl delete`。
### 3. CocoaPods 缓存 ~5-15GB
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
xcrun simctl delete unavailable
**禁止** 直接 `rm -rf ~/Library/Developer/CoreSimulator/Devices/<UUID>/`，必须用 `simctl delete`。
### 3. CocoaPods 缓存 ~5-15GB
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
xcrun simctl delete unavailable
**禁止** 直接 `rm -rf ~/Library/Developer/CoreSimulator/Devices/<UUID>/`，必须用 `simctl delete`。
### 3. CocoaPods 缓存 ~5-15GB
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
xcrun simctl delete unavailable
**禁止** 直接 `rm -rf ~/Library/Developer/CoreSimulator/Devices/<UUID>/`，必须用 `simctl delete`。
### 3. CocoaPods 缓存 ~5-15GB
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
xcrun simctl delete unavailable
**禁止** 直接 `rm -rf ~/Library/Developer/CoreSimulator/Devices/<UUID>/`，必须用 `simctl delete`。
### 3. CocoaPods 缓存 ~5-15GB
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
xcrun simctl delete unavailable
**禁止** 直接 `rm -rf ~/Library/Developer/CoreSimulator/Devices/<UUID>/`，必须用 `simctl delete`。
### 3. CocoaPods 缓存 ~5-15GB
The skill offers a direct rm -rf deletion of the CocoaPods cache. While the target path is user-scoped and commonly disposable, destructive shell deletion in an agent skill is risky because path expansion, quoting errors, or future variable substitution can widen the blast radius, and it enables file deletion without built-in safety checks.
pod cache clean --all
rm -rf ~/Library/Caches/CocoaPods/
### 4. iOS DeviceSupport（真机调试符号）~3-10GB
The skill offers a direct rm -rf deletion of the CocoaPods cache. While the target path is user-scoped and commonly disposable, destructive shell deletion in an agent skill is risky because path expansion, quoting errors, or future variable substitution can widen the blast radius, and it enables file deletion without built-in safety checks.
pod cache clean --all
rm -rf ~/Library/Caches/CocoaPods/
### 4. iOS DeviceSupport（真机调试符号）~3-10GB
The skill instructs rm -rf deletion of Xcode DeviceSupport directories. Although these are rebuildable artifacts, the command is still destructive and can remove the wrong path if placeholders are substituted incorrectly or if an agent executes without careful validation.
删除命令：
rm -rf ~/Library/Developer/Xcode/iOS\ DeviceSupport/<版本目录>
The skill instructs rm -rf deletion of Xcode DeviceSupport directories. Although these are rebuildable artifacts, the command is still destructive and can remove the wrong path if placeholders are substituted incorrectly or if an agent executes without careful validation.
删除命令：
rm -rf ~/Library/Developer/Xcode/iOS\ DeviceSupport/<版本目录>
The skill instructs rm -rf deletion of Xcode DeviceSupport directories. Although these are rebuildable artifacts, the command is still destructive and can remove the wrong path if placeholders are substituted incorrectly or if an agent executes without careful validation.
删除命令：
rm -rf ~/Library/Developer/Xcode/iOS\ DeviceSupport/<版本目录>
The skill provides rm -rf for deleting a single DerivedData project directory. DerivedData is generally safe to clear, but destructive recursive deletion by name can be error-prone if project identifiers are misresolved or shell-expanded incorrectly by an agent.
删除命令：
# 删除单个项目缓存
rm -rf ~/Library/Developer/Xcode/DerivedData/<项目名>/
# 清空全部
rm -rf ~/Library/Developer/Xcode/DerivedData/*
The skill provides rm -rf for deleting a single DerivedData project directory. DerivedData is generally safe to clear, but destructive recursive deletion by name can be error-prone if project identifiers are misresolved or shell-expanded incorrectly by an agent.
删除命令：
# 删除单个项目缓存
rm -rf ~/Library/Developer/Xcode/DerivedData/<项目名>/
# 清空全部
rm -rf ~/Library/Developer/Xcode/DerivedData/*
The skill provides rm -rf for deleting a single DerivedData project directory. DerivedData is generally safe to clear, but destructive recursive deletion by name can be error-prone if project identifiers are misresolved or shell-expanded incorrectly by an agent.
删除命令：
# 删除单个项目缓存
rm -rf ~/Library/Developer/Xcode/DerivedData/<项目名>/
# 清空全部
rm -rf ~/Library/Developer/Xcode/DerivedData/*
The command rm -rf ~/Library/Developer/Xcode/DerivedData/* performs broad wildcard deletion of all DerivedData contents. Even though the directory is usually disposable, wildcard recursive deletion is more dangerous than itemized cleanup because mistakes in expansion or path handling can cause much wider unintended deletion and no granular rollback.
rm -rf ~/Library/Developer/Xcode/DerivedData/<项目名>/
rm -rf ~/Library/Developer/Xcode/DerivedData/*
### 6. Archives（归档包）~0-10GB
The command rm -rf ~/Library/Developer/Xcode/DerivedData/* performs broad wildcard deletion of all DerivedData contents. Even though the directory is usually disposable, wildcard recursive deletion is more dangerous than itemized cleanup because mistakes in expansion or path handling can cause much wider unintended deletion and no granular rollback.
rm -rf ~/Library/Developer/Xcode/DerivedData/<项目名>/
rm -rf ~/Library/Developer/Xcode/DerivedData/*
### 6. Archives（归档包）~0-10GB
The skill includes rm -rf for deleting Xcode archive bundles. Archives may contain important release artifacts, symbols, or notarization-related outputs, so permanent recursive deletion can cause operational loss if an agent or user misidentifies an archive.
删除命令：
rm -rf ~/Library/Developer/Xcode/Archives/<日期>/<归档名>.xcarchive
The skill includes rm -rf for deleting Xcode archive bundles. Archives may contain important release artifacts, symbols, or notarization-related outputs, so permanent recursive deletion can cause operational loss if an agent or user misidentifies an archive.
删除命令：
rm -rf ~/Library/Developer/Xcode/Archives/<日期>/<归档名>.xcarchive
The skill includes rm -rf for deleting Xcode archive bundles. Archives may contain important release artifacts, symbols, or notarization-related outputs, so permanent recursive deletion can cause operational loss if an agent or user misidentifies an archive.
删除命令：
rm -rf ~/Library/Developer/Xcode/Archives/<日期>/<归档名>.xcarchive
The skill recommends rm -rf on the SwiftPM cache directory. Although cache cleanup is routine, using raw recursive deletion in an agent-executed context still creates avoidable destructive risk from path mishandling and bypasses safer package-manager-native cleanup options.
删除命令：
rm -rf ~/Library/Caches/org.swift.swiftpm/
The skill recommends rm -rf on the SwiftPM cache directory. Although cache cleanup is routine, using raw recursive deletion in an agent-executed context still creates avoidable destructive risk from path mishandling and bypasses safer package-manager-native cleanup options.
删除命令：
rm -rf ~/Library/Caches/org.swift.swiftpm/
This line instructs rm -rf over the CoreSimulator cache contents with a wildcard. While intended for cleanup, it is still a destructive recursive command that can unexpectedly alter simulator behavior and poses path-expansion risk in an automated agent setting.
删除命令：
rm -rf ~/Library/Developer/CoreSimulator/Caches/*
rm -rf ~/Library/Developer/Xcode/UserData/IDB/*
rm -rf ~/Library/Developer/Xcode/DocumentationCache/*
rm -rf ~/Library/Caches/com.apple.dt.Xcode/*
This line instructs rm -rf over the CoreSimulator cache contents with a wildcard. While intended for cleanup, it is still a destructive recursive command that can unexpectedly alter simulator behavior and poses path-expansion risk in an automated agent setting.
删除命令：
rm -rf ~/Library/Developer/CoreSimulator/Caches/*
rm -rf ~/Library/Developer/Xcode/UserData/IDB/*
rm -rf ~/Library/Developer/Xcode/DocumentationCache/*
rm -rf ~/Library/Caches/com.apple.dt.Xcode/*
This command recursively deletes Xcode IDB user data contents. These files are less critical than source code, but the use of direct wildcard rm -rf still creates unnecessary destructive risk and may remove debugging or indexing state the user expected to keep.
删除命令：
rm -rf ~/Library/Developer/CoreSimulator/Caches/*
rm -rf ~/Library/Developer/Xcode/UserData/IDB/*
rm -rf ~/Library/Developer/Xcode/DocumentationCache/*
rm -rf ~/Library/Caches/com.apple.dt.Xcode/*
This command recursively deletes Xcode IDB user data contents. These files are less critical than source code, but the use of direct wildcard rm -rf still creates unnecessary destructive risk and may remove debugging or indexing state the user expected to keep.
删除命令：
rm -rf ~/Library/Developer/CoreSimulator/Caches/*
rm -rf ~/Library/Developer/Xcode/UserData/IDB/*
rm -rf ~/Library/Developer/Xcode/DocumentationCache/*
rm -rf ~/Library/Caches/com.apple.dt.Xcode/*