swiftui-webkit
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation and reference guide for using SwiftUI WebKit APIs. It does not contain executable scripts, external dependencies, or sensitive data access.
- [SAFE]: The documentation explicitly advocates for security best practices, such as using
ASWebAuthenticationSessionfor OAuth and third-party authentication flows to prevent credential harvesting in embedded views. - [SAFE]: The skill provides secure implementation patterns for JavaScript integration, specifically recommending the use of the
argumentsdictionary incallJavaScriptto avoid script injection risks associated with string interpolation of untrusted data. - [SAFE]: The instructions for navigation policies encourage restricting embedded web views to app-owned domains and handing off external URLs to the system browser, minimizing the attack surface of the embedded environment.
Audit Metadata