solo-swiftui-design-system
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill is a standard developer toolset for managing SwiftUI design systems. Its operations are transparent, well-documented, and limited to local project analysis and modification.
- [COMMAND_EXECUTION]: The skill uses local shell commands (
grep,sort,uniq) to audit Swift source code for hardcoded UI constants. It also provides commands for interacting with the iOS simulator (simctl) and Xcode's internal intelligence plugins. These actions are restricted to the developer's local environment and align with the skill's primary function. - [INDIRECT_PROMPT_INJECTION]: The skill includes a Python script (
scripts/design_migrate.py) that reads local Swift source files to perform design token migration. While it ingests external code, the script uses strictly defined regular expressions to perform text substitutions for UI constants (padding, spacing, etc.) and does not execute the processed data. - [DYNAMIC_EXECUTION]: The skill provides automated source code modification functionality ('codemod') through its Python utility. This modification is an intended feature for migrating legacy projects to a design scale and is implemented via standard file system operations without involving remote code execution or unsafe dynamic execution sinks.
Audit Metadata