catalyst-sdk
Fail
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The iOS SDK documentation in references/sdk-mobile.md instructs users to install a dependency (pod 'ZCatalyst') from a personal GitHub repository (https://github.com/nicetomeetyou/ZCatalyst.git) instead of an official Zoho organization or the standard CocoaPods registry. Integrating code from an unverified personal repository represents a potential supply chain attack vector.
- [INDIRECT_PROMPT_INJECTION]: The skill documents numerous ingestion points and processing logic that handle external data, creating an attack surface for indirect prompt injection.
- Ingestion points: Serverless function handlers (Express/Flask/Java), database query parameters (ZCQL), and browser automation URLs (Selenium/SmartBrowz) across all reference files.
- Boundary markers: The provided code snippets lack explicit boundary markers or instructions to the agent to ignore embedded instructions in processed data.
- Capability inventory: The SDK provides extensive capabilities including file system access (Stratus), database manipulation (DataStore), network operations (Email/Push Notifications), and execution of server-side logic (Circuits/Functions).
- Sanitization: There is no evidence of input validation, sanitization, or escaping in the documented patterns, making applications built with these snippets potentially vulnerable to injection attacks.
Recommendations
- AI detected serious security threats
Audit Metadata