agent-ios is pre-1.0 and moves quickly. Security fixes land on the latest released version and main. Older 0.x releases are not maintained - please update to the newest version before reporting.

Please do not open a public issue for security problems.

Report privately to security@squaduplabs.com. Include:

• a description of the issue and its impact,
• steps to reproduce (a proof of concept if you have one),
• affected version (agent-ios --version) and your macOS / Xcode versions.

You can expect an acknowledgement within a few business days. Once a fix is available we will coordinate a release and credit you in the release notes unless you prefer to remain anonymous.

If the project is hosted on GitHub, you may also use private vulnerability reporting on the repository.

agent-ios is a local developer tool. It:

• runs on your machine and drives iOS Simulators you have booted,
• starts an HTTP server bound to 127.0.0.1 (loopback only, never a public interface) to talk to the in-simulator runner,
• shells out to xcrun simctl and xcodebuild,
• stores build cache and per-device state under ~/.agent-ios.

Things we consider in scope: the loopback server accepting input it should not, command injection through arguments, or the tool writing outside its expected directories. Things generally out of scope: risks that require an attacker to already have local code-execution on your machine, and the behavior of the simulators or apps you point it at.