swiftui-navigation
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates patterns for handling external URLs via deep links and universal links. This introduces a surface for indirect prompt injection if untrusted data is processed without sufficient validation.
- Ingestion points:
onOpenURLandonContinueUserActivitymodifiers located inSKILL.mdandreferences/deeplinks.md. - Boundary markers: The provided patterns do not include explicit prompt boundary markers or 'ignore' instructions for the agent when processing link data.
- Capability inventory: The skill enables programmatic navigation within the application state and opening system-level URLs.
- Sanitization: The documentation advises validating URLs before navigation, although specific implementation for input sanitization is left to the user.
- [EXTERNAL_DOWNLOADS]: The skill references external source code repositories and documentation sites.
- Evidence: Link to a third-party Swift library
https://github.com/Dimillian/AppRouterinreferences/navigationstack.mdand a documentation link tohttps://sosumi.ai/documentation/xcode/supporting-universal-links-in-your-appinreferences/deeplinks.md.
Audit Metadata