swift-navigation-skill
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for building URL and notification resolvers that ingest untrusted external data, creating a potential surface for indirect prompt injection.
- Ingestion points: The
URLDeepLinkResolvingandNotificationDeepLinkResolvingprotocols inreferences/deep-links-and-universal-links.mdprocess external URLs and notification payloads. - Boundary markers: No specific boundary markers or delimiters for the LLM are implemented in the code snippets, though structural parsing is encouraged.
- Capability inventory: The integration is scoped to navigation state management (stack pushes, modal presentations, and alerts).
- Sanitization: The skill explicitly recommends validating schemes, hosts, and segments, and using explicit validation errors rather than silent fallbacks.
- [EXTERNAL_DOWNLOADS]: The documentation includes instructions to download and install the skill from a remote repository.
- Evidence:
npx skills add https://github.com/Erikote04/SwiftNavigation --skill skillinREADME.md. - Context: The command fetches content from the author's own repository on GitHub, which is a well-known service. This is a standard installation pattern for this type of extension.
Audit Metadata