product-development

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as a professional development assistant for the Apple platform. It leverages standard industry tools like Fastlane and relies on well-known libraries such as Alamofire. The instructions throughout the modules emphasize best practices and do not contain any obfuscated code or suspicious remote execution patterns.- [INDIRECT_PROMPT_INJECTION]: The skill processes user-input app ideas through a multi-stage validation and documentation pipeline. This ingestion of untrusted data represents an indirect prompt injection surface. However, the risk is low because the agent's behavior is governed by strict markdown and JSON templates, and the skill does not grant the agent high-privilege capabilities that could be exploited by such data.- [CREDENTIALS_UNSAFE]: The skill includes extensive documentation on correctly handling sensitive information, such as P12 certificates and API tokens, by using secure storage like the iOS Keychain and GitHub Secrets, rather than hardcoding them into the project files.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 09:32 PM