conorluddy-xc-mcp

Security Findings (171)

• HighAS-012

  🔄Tool Drift

  Tool set changed silently at v3.2.0: 7 tool(s) added, 0 tool(s) removed without a version bump.

  + 7 added

  idb-clear-keychainidb-crash-deleteidb-crash-listidb-crash-showidb-doctoridb-simulate-memory-warningidb-xctest-list

  Fix: The set of tools exposed by this server changed between scans of the same version — a sign the package was silently updated without a version bump. Audit the changelog and all tool definitions before trusting this server. Pin to a specific commit hash rather than a floating version tag.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×34

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  xcodebuild-versionxcodebuild-listxcodebuild-cleanxcodebuild-testxcodebuild-get-detailsxcodebuild-showsdkscache-get-statscache-get-configcache-set-configcache-clearpersistence-enablepersistence-disablepersistence-statusrtfmsimctl-get-detailssimctl-health-checksimctl-launchsimctl-terminatesimctl-openurlsimctl-pushsimctl-pbcopysimctl-privacysimctl-status-barsimctl-stream-logsidb-ui-tapidb-ui-inputidb-ui-gestureidb-ui-describeaccessibility-quality-checkaccessibility-auditidb-crash-showworkflow-tap-elementsimctl-appearancexcode-model-inspect

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• LowAS-002

  ⚠️Excessive Permissions ×2

  input schema exposes 13 properties (threshold: 10)

  idb-ui-tap

  input schema exposes 11 properties (threshold: 10)

  idb-ui-gesture

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-002

  ⚠️Excessive Permissions ×56

  declared capabilities: code/command execution, database access

  xcodebuild-versionxcodebuild-showsdksidb-ui-describeaccessibility-quality-checkworkflow-tap-element

  declared capabilities: code/command execution, filesystem access

  xcodebuild-listxcodebuild-cleanxcodebuild-testpersistence-statusidb-ui-gesture

  declared capabilities: filesystem access

  xcodebuild-buildxcodebuild-inspect-schemexcodebuild-validate-capabilitiessimctl-createsimctl-deletesimctl-installsimctl-iosimctl-addmediasimctl-suggestidb-crash-deleteidb-installtest-record-reportlocalization-auditvisual-diff

  declared capabilities: code/command execution

  xcodebuild-get-detailscache-get-statscache-get-configcache-set-configcache-clearsimctl-get-detailssimctl-health-checkidb-ui-tapidb-ui-input

  declared capabilities: code/command execution, filesystem access, HTTP requests

  persistence-enablepersistence-disable

  declared capabilities: network access, filesystem access

  rtfmsimctl-pbcopyidb-crash-showxcode-model-inspect

  declared capabilities: code/command execution, network access, environment variables

  simctl-launch

  declared capabilities: code/command execution, HTTP requests

  simctl-terminatesimctl-appearance

  declared capabilities: filesystem access, database access

  simctl-get-app-containerscreenshotsimctl-container

  declared capabilities: network access, database access

  simctl-openurl

  declared capabilities: network access, filesystem access, HTTP requests

  simctl-push

  declared capabilities: HTTP requests

  simctl-privacy

  declared capabilities: network access

  simctl-status-barsimctl-stream-logsaccessibility-audit

  declared capabilities: database access

  idb-ui-find-element

  declared capabilities: environment variables

  idb-launch

  declared capabilities: filesystem access, environment variables

  workflow-fresh-installworkflow-build-and-runtest-record-step

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×77

  No metadata.dependencies or repo_url were exposed by this MCP server, and no local project manifest could be inferred from the launch command.

  xcodebuild-versionxcodebuild-listxcodebuild-buildxcodebuild-cleanxcodebuild-testxcodebuild-get-detailsxcodebuild-showsdksxcodebuild-inspect-schemexcodebuild-validate-capabilitiessimctl-listcache-get-statscache-get-configcache-set-configcache-clearpersistence-enablepersistence-disablepersistence-statusrtfmsimctl-get-detailssimctl-bootsimctl-shutdownsimctl-createsimctl-deletesimctl-erasesimctl-clonesimctl-renamesimctl-health-checksimctl-installsimctl-uninstallsimctl-launchsimctl-terminatesimctl-get-app-containersimctl-openurlsimctl-iosimctl-pushscreenshotsimctl-addmediasimctl-pbcopysimctl-privacysimctl-status-barsimctl-stream-logssimctl-suggestsimctl-containeridb-targetsidb-ui-tapidb-ui-inputidb-ui-gestureidb-ui-describeidb-ui-find-elementaccessibility-quality-checkaccessibility-auditidb-list-appsidb-crash-listidb-crash-showidb-crash-deleteidb-simulate-memory-warningidb-clear-keychainidb-xctest-listidb-installidb-uninstallidb-launchidb-terminateworkflow-tap-elementworkflow-fresh-installworkflow-build-and-runtest-record-steptest-record-reportsimctl-appearancesimctl-locationlocalization-auditxcode-model-inspectvisual-diffidb-doctorhang-starthang-stophang-get-detailshang-list

  Fix: Review and remediate the identified issue.

• InfoAS-010

  🔑Insecure Secret Handling

  hang-stop:input parameter "budgetTokens" accepts a credential (informational; not evidence of insecure handling)

  Fix: Avoid accepting raw credentials as input parameters. Use secret managers (e.g. 1Password CLI, AWS Secrets Manager) and ensure credentials are never logged or stored in agent traces.