swift-codable
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides code patterns for fetching and decoding external JSON data from remote APIs (e.g.,
URLSession.shared.data(from: url)inSKILL.md). This establishes an ingestion point for untrusted data.\n- Ingestion points: Remote API responses fetched viaURLSession(SKILL.md).\n- Boundary markers: Absent.\n- Capability inventory: Network operations (URLSession) and structured data parsing (JSONDecoder) across the provided snippets inSKILL.md.\n- Sanitization: Relies on standard Swift type-safety; no explicit sanitization or filtering for downstream prompt usage.
Audit Metadata