XcodebuildmcpBLOCK

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

brew tap getsentry/xcodebuildmcp
brew install mobilebuildmcp

npm install -g mobilebuildmcp@latest

mobilebuildmcp --help

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: mobilebuildmcp-cli
description: Official skill for the MobileBuildMCP CLI. Use when doing iOS/macOS/watchOS/tvOS/visionOS work (build, test, run, debug, log, UI automation).
---

# MobileBuildMCP CLI

Use MobileBuildMCP tools via the `mobilebuildmcp` executable instead of raw `xcodebuild`, `xcrun`, or `simctl`.

## Step 1: Ensure the CLI Exists

Check availability:
```bash
mobilebuildmcp --help
```

If missing, install with one of:
```bash
brew tap getsentry/xcodebuildmcp
brew install mobilebuildmcp
```

```bash
npm install -g mobilebuildmcp@latest
```

Re-check after install:
```bash
mobilebuildmcp --help
```

## Step 2: Use Help-First Discovery

Discover workflows and arguments from the CLI itself:
```bash
mobilebuildmcp --help
mobilebuildmcp tools
mobilebuildmcp <workflow> --help
mobilebuildmcp <workflow> <tool> --help
```

Use this discovery path instead of memorizing static tool lists.

## Step 3: Keep Execution Minimal

- Choose the smallest command sequence that satisfies the request.
- Prefer direct workflow commands over manual multi-step chains unless explicitly requested.
- For simulator run intent, prefer the combined `build-and-run` command.
- Do not chain `build` then `build-and-run` unless explicitly requested.

## Capability Overview

`mobilebuildmcp` supports:
- simulator and device build/test/run
- debugging and log capture
- UI automation
- project discovery and scaffolding
- session defaults and workflow configuration

## Exit Criteria

- CLI presence is verified or installation steps are provided.
- Commands are discovered via `--help` / `tools`.
- Session defaults are checked before first build/run/test action.

BLOCKgrade D · trust 64/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

What the source does

Filesystem

declared (7 observation(s))

Network

declared (7 observation(s))

Shell

declared (6 observation(s))

Dependencies

not all pinned

Secrets in source

none-found

Findings (18)

const res = await exec([axePath, '--version'], 'AXe Version', true);

1. Important: Before working on the project make sure to read the README.md file in the workspace root directory.

1. Important: Before working on the project make sure to read the README.md file in the workspace root directory.

1. Important: Before working on the project make sure to read the README.md file in the workspace root directory.

1. Important: Before working on the project make sure to read the README.md file in the workspace root directory.

'YnBsaXN0MDDUAQIDBAUGBwpYJHZlcnNpb25ZJGFyY2hpdmVyVCR0b3BYJG9iamVjdHMSAAGGoF8QD05TS2V5ZWRBcmNoaXZlctEICVRyb290gAGnCwwVFhwdHlUkbnVsbNMNDg8QEhRXTlMua2V5c1pOUy5vYmplY3RzViRjbGFzc6ERgAKhE4ADgAZcQWN0aXZlU2N

.axe-version

.prettierignore

.prettierrc.js

expect(() => new Function(generated)).not.toThrow();

expect(() => new Function(code)).not.toThrow();

import { runDirectory } from '../../src/benchmarks/claude-ui/run-directory.ts';

import { main } from '../../src/benchmarks/claude-ui/harness.ts';

'../../utils/index.js',

'../../../utils/index.js',

'../../utils/index.ts',

[![npm version](https://badge.fury.io/js/mobilebuildmcp.svg)](https://badge.fury.io/js/mobilebuildmcp) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/lic

@clack/prompts, @modelcontextprotocol/sdk, @sentry/node, bplist-parser, chokidar, glob, uuid, yaml

Gates applied: no_behavioural_pass.

[![ModelsAtlas audit: Xcodebuildmcp](https://modelsatlas.com/skills/cameroncooke/xcodebuildmcp/badge.svg)](https://modelsatlas.com/skills/cameroncooke/xcodebuildmcp/)

Not your listing, or something out of date? Claim or update your listing.