update-swiftui-apis

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external documentation content which creates an indirect prompt injection surface.
  • Ingestion points: The skill fetches data from external Apple developer documentation, WWDC video transcripts, and other external URLs using tools like fetchAppleDocumentation, fetchAppleVideoTranscript, and fetchExternalDocumentation as defined in the references/scan-manifest.md.
  • Boundary markers: There are no instructions provided to the agent to use specific delimiters or boundary markers to separate untrusted external content from its primary instructions.
  • Capability inventory: The agent has the capability to write to repository files (skills/swiftui-expert-skill/references/latest-apis.md) and execute the gh pr create command to submit changes to a repository.
  • Sanitization: The skill does not describe any specific mechanisms for sanitizing, validating, or filtering the retrieved markdown content before it is used to generate documentation updates and pull request descriptions.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 10:15 PM