agent-deep-links
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
PlistBuddyandopencommands to verify application capabilities. These are standard system utilities used for their intended purpose in the context of deep-link verification. - [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface where user-supplied application names and URL schemes are interpolated into shell commands for verification.
- Ingestion points: Application names and schemes provided by the user or defined in
references/deep-link-matrix.mdas described inSKILL.md. - Boundary markers: None identified.
- Capability inventory: Metadata inspection via
PlistBuddyand application/URL launching viaopen. - Sanitization: No explicit sanitization or input validation logic is present in the instructions.
- [SAFE]: The documentation links provided in the reference matrix point to official developer resources for VS Code, Cursor, and Visual Studio.
Audit Metadata