update-ios-deployment-target
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided version strings to perform find-and-replace operations in project files, which represents an indirect injection surface.
- Ingestion points: User input for 'Current minimum iOS version' and 'New minimum iOS version' strings.
- Boundary markers: None; the skill relies on the user providing valid version strings.
- Capability inventory: Modifies
Podfileand.pbxprojfiles; executes shell commands (find,grep,./test_template.sh). - Sanitization: No explicit sanitization or validation of the version strings is described before interpolation into file contents or shell commands.
- [COMMAND_EXECUTION]: The skill uses standard local shell commands (
find,grep) and a repository-specific script (./test_template.sh) for automation and testing. These operations are restricted to the local filesystem and are consistent with standard SDK maintenance workflows.
Audit Metadata