📦
Audit History
limrun-xcode - 1 audit
Audit version 1 Latest
Aug 21, 2026, 08:33 AM
Most static alerts are false positives caused by Markdown backticks, command fences, identifiers, and a documented URL. Confirmed risks involve soliciting an API key and transmitting Apple signing certificates and passwords to a remote build service. Semantic review also identified unpinned global package installation, source-code upload, and privileged App Store credential transfer.
1
Files scanned
333
Lines analyzed
10
Review items
0
False positives ignored
Confirmed security concerns (6)
Critical
Privileged Apple Credentials Sent to Remote Service
The cloud workflow supplies an App Store Connect private key to a third-party service with authority to sign and upload application releases.
The cited commands pass the private key path and identifiers to remote signing and App Store upload operations.
High
Certificate/key files
--certificate-p12 dist.p12 --certificate-password "$P12_PASSWORD" \
The remote build command supplies a signing certificate and its password to Limrun. Process-argument exposure or remote-service compromise could disclose signing credentials.
High
Certificate/key files
--certificate-p12 dist.p12 --certificate-password "$P12_PASSWORD" \
The remote build command supplies a signing certificate and its password to Limrun. Process-argument exposure or remote-service compromise could disclose signing credentials.
High
Certificate/key files
--certificate-p12 dist.p12 --certificate-password "$P12_PASSWORD" \
The remote build command supplies a signing certificate and its password to Limrun. Process-argument exposure or remote-service compromise could disclose signing credentials.
High
Project Source Uploaded to Third-Party Infrastructure
The skill directs the agent to sync project sources to Limrun infrastructure and continue remote execution until the application works.
Lines 10 through 15 explicitly state that sources are synced to remote Xcode and built there.
High
Unpinned Global Package Installation
The skill directs installation of the latest globally published lim npm package without version or integrity controls.
Line 23 gives a global npm installation command with no version pin, checksum, or package provenance check.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Generic API/secret keys
`LIM_API_KEY` is wrong; ask the user to run `lim login` or provide a key.
The instruction tells the agent to ask the user to provide LIM_API_KEY after an authentication error. This can cause disclosure of an API credential in chat.
Risk Factors
⚙️ External commands (50)
SKILL.md:3 SKILL.md:11 SKILL.md:18 SKILL.md:19 SKILL.md:23 SKILL.md:24 SKILL.md:25 SKILL.md:27 SKILL.md:29-32 SKILL.md:32-36 SKILL.md:36-38 SKILL.md:38-40 SKILL.md:40-45 SKILL.md:45 SKILL.md:48-50 SKILL.md:50-52 SKILL.md:52 SKILL.md:53-54 SKILL.md:54-56 SKILL.md:56-58 SKILL.md:58-60 SKILL.md:60 SKILL.md:65-67 SKILL.md:67-72 SKILL.md:72-74 SKILL.md:74-78 SKILL.md:78 SKILL.md:80-82 SKILL.md:82-84 SKILL.md:84-86 SKILL.md:86-87 SKILL.md:87-88 SKILL.md:88-93 SKILL.md:93-95 SKILL.md:95-98 SKILL.md:98-100 SKILL.md:100 SKILL.md:106-109 SKILL.md:109-112 SKILL.md:112-114 SKILL.md:114-120 SKILL.md:120-122 SKILL.md:122-128 SKILL.md:128-130 SKILL.md:130-136 SKILL.md:136-140 SKILL.md:140-141 SKILL.md:141-142 SKILL.md:142-144 SKILL.md:144-145
🌐 Network access (1)
🔑 Env variables (2)
Audited by: codex