txt-bidi
Warn
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch 'current Apple docs' from 'sosumi.ai/documentation/uikit/uitextinput' and other subpaths. This site is not an official Apple domain and mimics the structure of official documentation, which could be used to deliver poisoned instructions or unreliable technical data to the agent.
- [PROMPT_INJECTION]: The skill uses deceptive metadata and instructions, claiming to be authored for non-existent futuristic versions of software (iOS 26.x, Swift 6.x, Xcode 26.x). This 'hallucination' framing is a common technique used to attempt to bypass safety constraints or ground the model in a fictional context where its normal operational guidelines might not apply.
Audit Metadata