axiom-audit-swiftui-layout
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates by reading and analyzing external source code provided by the user, which presents an attack surface where malicious code could contain instructions designed to influence the agent's analysis or behavior. \n
- Ingestion points: The agent uses
ReadandGreptools to ingest content from**/*.swiftand*.plistfiles during its audit phases. \n - Boundary markers: The skill lacks explicit instructions or delimiters to tell the agent to ignore instructions embedded within the data it is analyzing. \n
- Capability inventory: The skill's capabilities are restricted to file discovery and text analysis (
Glob,Grep,Read); it does not request network access, sensitive file system access, or arbitrary command execution. \n - Sanitization: No validation or sanitization is performed on the ingested code content before it is processed by the agent.
Audit Metadata