ios-rocketsim-operator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited ios-rocketsim-operator (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Before invoking Apple-only binaries, confirm the execution context is macOS. From Windows or Linux, run those steps in a Mac SSH project or through an already configured remote transport; do not retry missing Apple binaries locally.
Use the installed RocketSim app as the versioned Simulator automation layer. Always resolve the matching app bundle, bundled skill, and CLI before interacting with a simulator.
Prefer a running RocketSim bundle:
ROCKETSIM_PID="$(pgrep -x RocketSim | head -1)"
APP_PATH=""
if [ -n "$ROCKETSIM_PID" ]; then
APP_PATH="$(ps -o command= -p "$ROCKETSIM_PID" | sed 's#/Contents/MacOS/RocketSim$##')"
fi
printf '%s\n' "$APP_PATH"If not running, enumerate candidates with:
mdfind "kMDItemCFBundleIdentifier == 'com.swiftLee.RocketSim'"Also check /Applications/RocketSim.app, /Applications/RocketSim 2.app, ~/Applications/RocketSim.app, and ~/Applications/RocketSim 2.app.
For each candidate, validate both files:
test -f "$APP_PATH/Contents/Resources/Agent-Skill/SKILL.md" && \
test -x "$APP_PATH/Contents/Helpers/rocketsim"Use the first valid candidate. If RocketSim is running, use the running bundle only if it validates; otherwise rediscover or stop.
If no candidate validates, tell the user to launch or install a current RocketSim build from the Mac App Store: https://apps.apple.com/us/app/rocketsim-for-xcode-simulator/id1504940162
After discovery, set:
$APP_PATH/Contents/Resources/Agent-Skill/SKILL.md$APP_PATH/Contents/Helpers/rocketsimBefore any CLI call:
pgrep -x RocketSim >/dev/null && echo "Running" || echo "Not running"If RocketSim is not running, ask the user to launch it. If it is running from a different bundle than APP_PATH, restart discovery and prefer the running bundle.
Read the bundled Agent-Skill/SKILL.md and follow it. Wherever it refers to rocketsim, use the resolved absolute CLI path. Do not use ad hoc simulator automation until discovery, validation, and the running-app check pass.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.