skills/apple/foundation-models-utilities/foundation-models-language-model-protocol/Gen Agent Trust Hub
foundation-models-language-model-protocol
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Authentication and Credential Management: The skill provides code templates for handling API keys and OAuth sessions. These are standard implementation patterns for authenticated network services. Developers utilizing these templates should ensure that keys are stored securely (e.g., using Keychain as suggested in the text) and that the
Hashableimplementation for configurations does not inadvertently expose sensitive data in logs. - External Data Processing (Attack Surface): The executor component acts as a bridge for data received from remote inference APIs. This creates a surface for indirect prompt injection if the remote model produces malicious content.
- Ingestion points: The
respondmethod in theExecutorimplementation (Step 2) ingests data from a remote provider via theopenProviderStreamsequence. - Boundary markers: The code focus is on protocol translation; it does not explicitly implement data delimiters, as sanitization is typically handled by the underlying Foundation Models framework or the inference provider.
- Capability inventory: The executor performs network operations to communicate with external endpoints and uses the
LanguageModelExecutorGenerationChannelto stream data back to the agent framework. - Sanitization: The skill provides a structural template for translation. Developers implementing this should include validation logic within the
init(configuration:)and response handling blocks to verify the integrity of external data.
Audit Metadata