axiom-app-store-diag
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides several shell commands for diagnosing project issues, such as
grepfor finding placeholders,curlfor verifying URL availability, andsecurityfor inspecting provisioning profiles. These commands are local, transparent, and intended for manual execution by a developer during the debugging process. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the user to provide App Store rejection messages for diagnosis. While this represents an ingestion point for external data, the skill acts as a static diagnostic guide and does not automate dangerous actions based on the content of these messages. This is standard functionality for a technical support skill.
- [DATA_EXPOSURE]: Technical audit commands like
stringsandxcodebuildare used to inspect local binary properties and environment versions. These operations do not involve sensitive data exfiltration or unauthorized access.
Audit Metadata