apple-docs-mcp
Warn
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation instructs users to install an external package from the npm registry using '@kimsungwhee/apple-docs-mcp@latest'. The package author does not match the skill author ('jordancoin') and is not on the trusted vendor list.
- [REMOTE_CODE_EXECUTION]: The installation process uses 'npx -y', which downloads and immediately executes the package. The use of the '@latest' tag means the code being executed can change at any time without user review.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external sources such as Apple Developer Documentation and WWDC transcripts.
- Ingestion points: Content is fetched via tools like 'get_apple_doc_content', 'search_apple_docs', and 'get_wwdc_video_details'.
- Boundary markers: The instructions do not define delimiters or specific warnings to prevent the agent from obeying instructions that might be embedded in the fetched documentation.
- Capability inventory: The skill performs network operations to retrieve documentation content.
- Sanitization: There is no indication of content sanitization or filtering for the data retrieved from external APIs.
Audit Metadata