uikit-app-modernization
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an inherent vulnerability surface by design, as it is designed to ingest and transform untrusted source code provided by the user.
- Ingestion points: The skill reads user-provided Swift and Objective-C files, as well as project configuration files like Info.plist, to identify legacy API patterns.
- Boundary markers: The instructions do not define strict boundary markers or safety delimiters to prevent the agent from interpreting instructions that might be embedded within code comments or strings in the analyzed files.
- Capability inventory: The skill grants the agent extensive capabilities to perform write operations on source code, generate new files (e.g., SceneDelegate.swift), and update build configurations.
- Sanitization: No explicit logic or filtering is provided to sanitize input code to prevent malicious payloads from influencing the agent's behavior during the modernization process.
- [SAFE]: The skill references official technical documentation and resources from a trusted organization for migration guidance.
- Evidence: The references include links to official Apple developer documentation (developer.apple.com) for UIKit scene lifecycle and coordinate space guidelines.
Audit Metadata