mobilebuildmcp-snapshot-fixture-review
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and review snapshot fixtures (
src/snapshot-tests/__fixtures__/**), which serve as an external data source. This constitutes a potential attack surface for indirect prompt injection, although it is intrinsic to the skill's primary function as a review tool. - Ingestion points: Snapshot fixture files and documentation content.
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the fixture data.
- Capability inventory: The agent has file-reading capabilities and can modify files if explicitly requested by the user.
- Sanitization: No explicit sanitization or content filtering is specified for the fixture data.
- [EXTERNAL_DOWNLOADS]: The skill identifies a remote documentation path (
xcodebuildmcp.com/app/docs/_content/testing.mdx) for inspection. While this involves a network operation to a non-whitelisted domain, it is a direct reference to the official documentation for the tool supported by the skill.
Audit Metadata