ios-fix
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external bug reports and analyzes project source code to perform automated fixes. It has the capability to modify Swift source files and execute build commands without explicit sanitization or boundary markers for the ingested data.\n
- Ingestion points: reads findings from /ios-qa and project source files.\n
- Boundary markers: none specified for the ingested bug descriptions.\n
- Capability inventory: utilizes Edit for source modification and Bash for compilation and tool execution.\n
- Sanitization: no sanitization steps are documented for external inputs.\n- [COMMAND_EXECUTION]: The skill invokes several local binaries provided by the vendor (GStack) for session management, telemetry, and decision logging. It also executes standard developer tools such as xcodebuild and swift run.\n- [DATA_EXFILTRATION]: Operational data, including user decisions and discovered learnings, is logged via vendor-specific tools such as gstack-question-log and gstack-learnings-log. This data is processed by the local vendor-controlled binary suite.\n- [DYNAMIC_EXECUTION]: The skill uses eval to execute the shell output of the gstack-slug binary during its context recovery process.
Audit Metadata