scaffold-swift-ios-quality-gates
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill identifies and reads untrusted data from the target repository, specifically
AGENTS.md, package management scripts, GitHub workflow files, and Git hook configurations. This behavior creates an indirect prompt injection surface, as an attacker could place malicious instructions in these files to influence the agent's logic during the scaffolding process. There is no explicit sanitization or instruction to ignore embedded directives in these files. - [COMMAND_EXECUTION]: The skill generates and runs local entry points and Swift scripts (e.g.,
check-ios-affected.swift) to verify the gate setup. Although executing dynamically generated code carries inherent risk, the skill mitigates this by including a mandatory 'confirmation-before-write' step that requires explicit user approval before any file modifications or local executions take place. - [EXTERNAL_DOWNLOADS]: The skill references the official SwiftLint Docker image hosted on the GitHub Container Registry (
ghcr.io/realm/swiftlint) and utilizes standard GitHub Actions from verified organizations. These are recognized as well-known and trusted sources for development tooling.
Audit Metadata