The Agent Skills Directory

[SAFE]: The skill demonstrates secure implementation patterns for iOS app extensions. It correctly uses Apple's Keychain Sharing capability to allow the extension to access the host app's Clerk session securely, and uses App Groups for a shared filesystem container to handle offline queuing of data.
[INDIRECT_PROMPT_INJECTION]: The skill handles untrusted data shared via the iOS system share sheet, representing a standard attack surface for indirect prompt injection if the backend uses LLMs to process the saved content.
Ingestion points: ShareViewController.swift retrieves text and URLs from external sources via the extractSharedContent method.
Boundary markers: The implementation does not utilize explicit boundary markers or directives to ignore instructions embedded within the shared content when passing it to the backend.
Capability inventory: The skill uses ConvexClientWithAuth to perform network operations (client.action) that send shared content to a Convex backend.
Sanitization: The Convex action in convex-actions.ts performs basic string trimming and length slicing, but no advanced sanitization for malicious instructions is implemented.

ios-share-extension