swiftui-performance-audit
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze untrusted content provided by the user, which presents a surface for indirect prompt injection attacks.
- Ingestion points: The skill explicitly requests user-provided SwiftUI source code, data flow details, and exported Instruments trace data or screenshots (SKILL.md, Sections 1 and 2).
- Boundary markers: The instructions do not define boundary markers or include directives to the agent to ignore potentially malicious instructions embedded within the user's code or trace data.
- Capability inventory: The skill is limited to providing analysis and remediation suggestions. No dangerous capabilities, such as arbitrary command execution, network exfiltration, or unauthorized file-system writes, were found in the skill's logic.
- Sanitization: No methods for sanitizing or escaping the untrusted input are provided in the workflow.
Audit Metadata