update-swiftui-apis
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external documentation content which creates an indirect prompt injection surface.
- Ingestion points: The skill fetches data from external Apple developer documentation, WWDC video transcripts, and other external URLs using tools like
fetchAppleDocumentation,fetchAppleVideoTranscript, andfetchExternalDocumentationas defined in thereferences/scan-manifest.md. - Boundary markers: There are no instructions provided to the agent to use specific delimiters or boundary markers to separate untrusted external content from its primary instructions.
- Capability inventory: The agent has the capability to write to repository files (
skills/swiftui-expert-skill/references/latest-apis.md) and execute thegh pr createcommand to submit changes to a repository. - Sanitization: The skill does not describe any specific mechanisms for sanitizing, validating, or filtering the retrieved markdown content before it is used to generate documentation updates and pull request descriptions.
Audit Metadata