iOS Dev Cleanup

• Outcome: Review
• Latest audit: Sep 12, 2026 · 4:43 AM UTC
• Version: 1.0.1

Overview

This is a local iOS/Xcode cleanup skill, but it can permanently delete developer artifacts and includes automatic simulator cleanup without first asking the user.

Install only if you want an agent to inspect and clean local Xcode/iOS development storage. Before running it, require explicit approval for every deletion, including unavailable simulators/runtimes, and review archive deletion carefully because archives may contain important release artifacts.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (40)

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

xcrun simctl delete unavailable
```

**禁止** 直接 `rm -rf ~/Library/Developer/CoreSimulator/Devices/<UUID>/`，必须用 `simctl delete`。

### 3. CocoaPods 缓存 ~5-15GB

• Confidence: 90% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

xcrun simctl delete unavailable
```

**禁止** 直接 `rm -rf ~/Library/Developer/CoreSimulator/Devices/<UUID>/`，必须用 `simctl delete`。

### 3. CocoaPods 缓存 ~5-15GB

• Confidence: 90% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

xcrun simctl delete unavailable
```

**禁止** 直接 `rm -rf ~/Library/Developer/CoreSimulator/Devices/<UUID>/`，必须用 `simctl delete`。

### 3. CocoaPods 缓存 ~5-15GB

• Confidence: 85% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

xcrun simctl delete unavailable
```

**禁止** 直接 `rm -rf ~/Library/Developer/CoreSimulator/Devices/<UUID>/`，必须用 `simctl delete`。

### 3. CocoaPods 缓存 ~5-15GB

• Confidence: 85% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

xcrun simctl delete unavailable
```

**禁止** 直接 `rm -rf ~/Library/Developer/CoreSimulator/Devices/<UUID>/`，必须用 `simctl delete`。

### 3. CocoaPods 缓存 ~5-15GB

• Confidence: 90% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

xcrun simctl delete unavailable
```

**禁止** 直接 `rm -rf ~/Library/Developer/CoreSimulator/Devices/<UUID>/`，必须用 `simctl delete`。

### 3. CocoaPods 缓存 ~5-15GB

• Confidence: 90% confidence
• Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

pod cache clean --all

# 或直接删除
rm -rf ~/Library/Caches/CocoaPods/
```

### 4. iOS DeviceSupport（真机调试符号）~3-10GB

• Confidence: 91% confidence
• Finding: The skill offers a direct rm -rf deletion of the CocoaPods cache. While the target path is user-scoped and commonly disposable, destructive shell deletion in an agent skill is risky because path expansion, quoting errors, or future variable substitution can widen the blast radius, and it enables file deletion without built-in safety checks.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

pod cache clean --all

# 或直接删除
rm -rf ~/Library/Caches/CocoaPods/
```

### 4. iOS DeviceSupport（真机调试符号）~3-10GB

• Confidence: 91% confidence
• Finding: The skill offers a direct rm -rf deletion of the CocoaPods cache. While the target path is user-scoped and commonly disposable, destructive shell deletion in an agent skill is risky because path expansion, quoting errors, or future variable substitution can widen the blast radius, and it enables file deletion without built-in safety checks.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

**删除命令**：
```bash
rm -rf ~/Library/Developer/Xcode/iOS\ DeviceSupport/<版本目录>
```

### 5. DerivedData（编译缓存）~2-20GB

• Confidence: 90% confidence
• Finding: The skill instructs rm -rf deletion of Xcode DeviceSupport directories. Although these are rebuildable artifacts, the command is still destructive and can remove the wrong path if placeholders are substituted incorrectly or if an agent executes without careful validation.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

**删除命令**：
```bash
rm -rf ~/Library/Developer/Xcode/iOS\ DeviceSupport/<版本目录>
```

### 5. DerivedData（编译缓存）~2-20GB

• Confidence: 89% confidence
• Finding: The skill instructs rm -rf deletion of Xcode DeviceSupport directories. Although these are rebuildable artifacts, the command is still destructive and can remove the wrong path if placeholders are substituted incorrectly or if an agent executes without careful validation.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

**删除命令**：
```bash
rm -rf ~/Library/Developer/Xcode/iOS\ DeviceSupport/<版本目录>
```

### 5. DerivedData（编译缓存）~2-20GB

• Confidence: 90% confidence
• Finding: The skill instructs rm -rf deletion of Xcode DeviceSupport directories. Although these are rebuildable artifacts, the command is still destructive and can remove the wrong path if placeholders are substituted incorrectly or if an agent executes without careful validation.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

**删除命令**：
```bash
# 删除单个项目缓存
rm -rf ~/Library/Developer/Xcode/DerivedData/<项目名>/

# 清空全部
rm -rf ~/Library/Developer/Xcode/DerivedData/*

• Confidence: 90% confidence
• Finding: The skill provides rm -rf for deleting a single DerivedData project directory. DerivedData is generally safe to clear, but destructive recursive deletion by name can be error-prone if project identifiers are misresolved or shell-expanded incorrectly by an agent.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

**删除命令**：
```bash
# 删除单个项目缓存
rm -rf ~/Library/Developer/Xcode/DerivedData/<项目名>/

# 清空全部
rm -rf ~/Library/Developer/Xcode/DerivedData/*

• Confidence: 90% confidence
• Finding: The skill provides rm -rf for deleting a single DerivedData project directory. DerivedData is generally safe to clear, but destructive recursive deletion by name can be error-prone if project identifiers are misresolved or shell-expanded incorrectly by an agent.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

**删除命令**：
```bash
# 删除单个项目缓存
rm -rf ~/Library/Developer/Xcode/DerivedData/<项目名>/

# 清空全部
rm -rf ~/Library/Developer/Xcode/DerivedData/*

• Confidence: 90% confidence
• Finding: The skill provides rm -rf for deleting a single DerivedData project directory. DerivedData is generally safe to clear, but destructive recursive deletion by name can be error-prone if project identifiers are misresolved or shell-expanded incorrectly by an agent.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

rm -rf ~/Library/Developer/Xcode/DerivedData/<项目名>/

# 清空全部
rm -rf ~/Library/Developer/Xcode/DerivedData/*
```

### 6. Archives（归档包）~0-10GB

• Confidence: 94% confidence
• Finding: The command rm -rf ~/Library/Developer/Xcode/DerivedData/* performs broad wildcard deletion of all DerivedData contents. Even though the directory is usually disposable, wildcard recursive deletion is more dangerous than itemized cleanup because mistakes in expansion or path handling can cause much wider unintended deletion and no granular rollback.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

rm -rf ~/Library/Developer/Xcode/DerivedData/<项目名>/

# 清空全部
rm -rf ~/Library/Developer/Xcode/DerivedData/*
```

### 6. Archives（归档包）~0-10GB

• Confidence: 94% confidence
• Finding: The command rm -rf ~/Library/Developer/Xcode/DerivedData/* performs broad wildcard deletion of all DerivedData contents. Even though the directory is usually disposable, wildcard recursive deletion is more dangerous than itemized cleanup because mistakes in expansion or path handling can cause much wider unintended deletion and no granular rollback.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

**删除命令**：
```bash
rm -rf ~/Library/Developer/Xcode/Archives/<日期>/<归档名>.xcarchive
```

### 7. SPM 缓存（Swift Package Manager）~0-2GB

• Confidence: 90% confidence
• Finding: The skill includes rm -rf for deleting Xcode archive bundles. Archives may contain important release artifacts, symbols, or notarization-related outputs, so permanent recursive deletion can cause operational loss if an agent or user misidentifies an archive.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

**删除命令**：
```bash
rm -rf ~/Library/Developer/Xcode/Archives/<日期>/<归档名>.xcarchive
```

### 7. SPM 缓存（Swift Package Manager）~0-2GB

• Confidence: 88% confidence
• Finding: The skill includes rm -rf for deleting Xcode archive bundles. Archives may contain important release artifacts, symbols, or notarization-related outputs, so permanent recursive deletion can cause operational loss if an agent or user misidentifies an archive.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

**删除命令**：
```bash
rm -rf ~/Library/Developer/Xcode/Archives/<日期>/<归档名>.xcarchive
```

### 7. SPM 缓存（Swift Package Manager）~0-2GB

• Confidence: 90% confidence
• Finding: The skill includes rm -rf for deleting Xcode archive bundles. Archives may contain important release artifacts, symbols, or notarization-related outputs, so permanent recursive deletion can cause operational loss if an agent or user misidentifies an archive.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

**删除命令**：
```bash
rm -rf ~/Library/Caches/org.swift.swiftpm/
```

### 8. Caches & Logs（其他缓存和日志）

• Confidence: 90% confidence
• Finding: The skill recommends rm -rf on the SwiftPM cache directory. Although cache cleanup is routine, using raw recursive deletion in an agent-executed context still creates avoidable destructive risk from path mishandling and bypasses safer package-manager-native cleanup options.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

**删除命令**：
```bash
rm -rf ~/Library/Caches/org.swift.swiftpm/
```

### 8. Caches & Logs（其他缓存和日志）

• Confidence: 90% confidence
• Finding: The skill recommends rm -rf on the SwiftPM cache directory. Although cache cleanup is routine, using raw recursive deletion in an agent-executed context still creates avoidable destructive risk from path mishandling and bypasses safer package-manager-native cleanup options.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

**删除命令**：
```bash
rm -rf ~/Library/Developer/CoreSimulator/Caches/*
rm -rf ~/Library/Developer/Xcode/UserData/IDB/*
rm -rf ~/Library/Developer/Xcode/DocumentationCache/*
rm -rf ~/Library/Caches/com.apple.dt.Xcode/*

• Confidence: 90% confidence
• Finding: This line instructs rm -rf over the CoreSimulator cache contents with a wildcard. While intended for cleanup, it is still a destructive recursive command that can unexpectedly alter simulator behavior and poses path-expansion risk in an automated agent setting.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

**删除命令**：
```bash
rm -rf ~/Library/Developer/CoreSimulator/Caches/*
rm -rf ~/Library/Developer/Xcode/UserData/IDB/*
rm -rf ~/Library/Developer/Xcode/DocumentationCache/*
rm -rf ~/Library/Caches/com.apple.dt.Xcode/*

• Confidence: 90% confidence
• Finding: This line instructs rm -rf over the CoreSimulator cache contents with a wildcard. While intended for cleanup, it is still a destructive recursive command that can unexpectedly alter simulator behavior and poses path-expansion risk in an automated agent setting.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

**删除命令**：
```bash
rm -rf ~/Library/Developer/CoreSimulator/Caches/*
rm -rf ~/Library/Developer/Xcode/UserData/IDB/*
rm -rf ~/Library/Developer/Xcode/DocumentationCache/*
rm -rf ~/Library/Caches/com.apple.dt.Xcode/*
```

• Confidence: 90% confidence
• Finding: This command recursively deletes Xcode IDB user data contents. These files are less critical than source code, but the use of direct wildcard rm -rf still creates unnecessary destructive risk and may remove debugging or indexing state the user expected to keep.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

**删除命令**：
```bash
rm -rf ~/Library/Developer/CoreSimulator/Caches/*
rm -rf ~/Library/Developer/Xcode/UserData/IDB/*
rm -rf ~/Library/Developer/Xcode/DocumentationCache/*
rm -rf ~/Library/Caches/com.apple.dt.Xcode/*
```

• Confidence: 90% confidence
• Finding: This command recursively deletes Xcode IDB user data contents. These files are less critical than source code, but the use of direct wildcard rm -rf still creates unnecessary destructive risk and may remove debugging or indexing state the user expected to keep.

Static analysis

Detected: suspicious.destructive_delete_command

Documentation contains a destructive delete command without an explicit confirmation gate.

Warn

• Code: suspicious.destructive_delete_command
• Location: SKILL.md:241