axiom-audit-swiftui-nav
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to override system prompts or bypass safety guardrails were detected. The instructions focus entirely on code analysis logic.
- [DATA_EXPOSURE]: The skill does not access sensitive system paths (e.g., ~/.ssh, ~/.aws) or hardcoded credentials. It limits its scope to the project's source code files.
- [DATA_EXFILTRATION]: There are no network operations, API calls, or commands that send data to external domains. The analysis is performed locally using the environment's diagnostic tools.
- [OBFUSCATION]: The skill content is clear and uses standard Markdown/YAML. No hidden characters, Base64-encoded payloads, or homoglyph attacks were identified.
- [REMOTE_CODE_EXECUTION]: No patterns involving the download and execution of external scripts (e.g., curl | bash) or unverifiable dependencies were found.
- [DYNAMIC_CONTEXT_INJECTION]: The skill does not utilize the
!commandsyntax to execute shell commands at load time. - [INDIRECT_PROMPT_INJECTION]: While the skill processes untrusted source code, it does not possess write capabilities or network access that could be exploited by malicious content within the audited files. It is a passive diagnostic tool.
- [METADATA_POISONING]: The metadata fields (name, description, license) accurately represent the skill's functionality without deceptive intent.
Audit Metadata