swiftui-expert-skill
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains Python scripts (
record_trace.py,analyze_trace.py) that execute the macOSxctracedeveloper tool using thesubprocessmodule. These scripts are used to profile applications and export performance data for analysis. The implementation uses list-based argument passing (e.g.,subprocess.Popen(cmd)) which is a safe practice to prevent shell injection. - [DATA_EXFILTRATION]: No patterns of data exfiltration, hardcoded credentials, or unauthorized network activity were found. The skill's operations are confined to processing local performance trace files and system-level profiling as requested by the user.
- [PROMPT_INJECTION]: The instructions in
SKILL.mdprovide a detailed workflow for SwiftUI code review and performance optimization. No malicious patterns such as safety filter bypasses, instruction overrides, or system prompt extraction attempts were detected. - [EXTERNAL_DOWNLOADS]: The skill does not perform any remote code downloads or external script executions. All dependencies are part of the Python standard library or standard Apple developer tools.
Audit Metadata