writing-ios-unit-tests
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze potentially untrusted data from project source code, pull request changes, and test execution logs. These inputs could contain malicious instructions designed to manipulate the agent during the test-writing or debugging process.\n
- Ingestion points: Project source files, PR diffs, and test output logs (
logs/latest/raw_output.txt).\n - Boundary markers: The skill does not define explicit delimiters or instructions for the agent to distinguish between its own instructions and potentially malicious content within the ingested data.\n
- Capability inventory: The skill utilizes powerful capabilities including shell command execution (
xcodebuild,./scripts/test.sh), file system operations (cat), and simulator control (xcrun simctl).\n - Sanitization: No sanitization or validation mechanisms are defined to filter out malicious content from the processed files or logs.
Audit Metadata