axiom-app-store-diag

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides several shell commands for diagnosing project issues, such as grep for finding placeholders, curl for verifying URL availability, and security for inspecting provisioning profiles. These commands are local, transparent, and intended for manual execution by a developer during the debugging process.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the user to provide App Store rejection messages for diagnosis. While this represents an ingestion point for external data, the skill acts as a static diagnostic guide and does not automate dangerous actions based on the content of these messages. This is standard functionality for a technical support skill.
  • [DATA_EXPOSURE]: Technical audit commands like strings and xcodebuild are used to inspect local binary properties and environment versions. These operations do not involve sensitive data exfiltration or unauthorized access.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 12:42 AM