axiom-uikit
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The procedure in
skills/resize-auditor.mdinstructs the agent to ingest and analyze external project files, creating a potential indirect prompt injection surface. Ingestion points: The agent reads**/Info.plistand**/*.swiftfiles from the user's project. Boundary markers: The instructions lack explicit delimiters or warnings to the agent to disregard instructions found within the data being analyzed. Capability inventory: The agent is directed to use standard search and read tools (Glob,Grep,Read) and specialized development utilities (devicectl,xcrun). Sanitization: There is no defined logic for sanitizing or filtering the content of the project files before the agent processes them. - [COMMAND_EXECUTION]: The documentation and the auditor logic reference various system and developer tools, including
grep,glob,xcrun, anddevicectl. These tools are cited within their standard operational context for code analysis and hardware interaction during development.
Audit Metadata