axiom-swift
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The
swift-simplifieragent analyzes Swift source code (ingesting files via**/*.swiftglobs) to identify and suggest code simplifications. This creates a vulnerability surface where maliciously crafted comments or code patterns in the user's source files could attempt to manipulate the agent's reasoning or reporting. The skill attempts to mitigate this with a mandatory 'Safety / Over-Simplification Gate' and context verification steps. - [DYNAMIC_EXECUTION]: The skill generates and provides shell script templates for Xcode build phases and simulator preference management (using
PlistBuddy). While these are standard developer workflows for environment configuration, the provision of executable script snippets represents dynamic code generation from templates. - [EXTERNAL_DOWNLOADS]: The skill recommends the integration of established third-party libraries for tvOS development, specifically naming
SwifterandGCDWebServer. These are well-known, established community resources within the Apple development ecosystem.
Audit Metadata