axiom-performance
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines automated auditing and triage workflows that ingest potentially attacker-controlled external data.
- Ingestion points: Procedures in
energy-auditor.md,memory-auditor.md, andswift-performance-analyzer.mdingest codebase content. Thehang-diagnostics.mdandmetrickit-ref.mdfiles describe triaging.ipscrash logs, Sentry reports, and MetricKit diagnostic payloads. - Boundary markers: The auditor templates and triage instructions do not implement delimiters or 'ignore embedded instructions' warnings for the data being analyzed.
- Capability inventory: The skill utilizes analysis tools including
Glob,Grep,Read,xctrace,xcprof, andxcsym, which allow for broad filesystem and process metadata access. - Sanitization: The instructions do not define requirements for sanitizing, escaping, or filtering content from the analyzed logs or reports before processing by the agent.
Audit Metadata