dt-setup-ios
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the Dynatrace Swift Mobile SDK from the vendor's official GitHub repository (
https://github.com/Dynatrace/swift-mobile-sdk.git) using Swift Package Manager. - [COMMAND_EXECUTION]: The skill executes various system commands for environment validation and project management, including
xcodebuildfor checking versions and build settings,gem installfor thexcodeprojdependency, andxcrun simctlfor simulator interactions. - [REMOTE_CODE_EXECUTION]: The skill utilizes bundled Ruby (
add_spm_dependency.rb) and Bash (verify-setup.sh) scripts to automate the modification of Xcode project files and to verify the successful integration of the SDK. - [PROMPT_INJECTION]: The skill ingest data from a user-provided
dynatrace-ios-setup-configblock. This untrusted input is used to configure the SDK and is interpolated into project files and script arguments. While this represents a surface for indirect prompt injection, the instructions provide specific expected values and structures that limit the scope of the operations.
Audit Metadata