api-integration
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily instructional, providing decision frameworks and Swift code examples for network architecture, caching strategies, and offline-first design. The provided code snippets for
CacheManager,UserService, andSyncQueuefollow standard iOS development practices. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted data from external APIs. However, it explicitly mitigates this risk by instructing the agent to never expose DTOs (Data Transfer Objects) beyond the service layer, requiring a mapping step to domain models. This architectural pattern serves as a validation and sanitization boundary for external input.
- [DATA_EXPOSURE]: The skill includes explicit warnings against caching sensitive data without encryption and provides guidelines for excluding sensitive endpoints from standard URL caches. It also warns against hardcoding base URLs and exposing technical error details to users.
- [COMMAND_EXECUTION]: All code examples are written in Swift for iOS/tvOS environments and do not include any shell command execution, subprocess spawning, or unauthorized system access.
Audit Metadata