axiom-metrickit-ref
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of technical documentation and Swift code examples for the Apple MetricKit API. All analyzed files contain legitimate developer reference material with no evidence of malicious intent or hidden capabilities.
- [COMMAND_EXECUTION]: The skill includes shell command examples (
atos,mdfind) for symbolication of crash reports. These are standard local macOS development tools used for interpreting memory addresses and are not used for malicious purposes or remote execution. - [DATA_EXFILTRATION]: While the code examples demonstrate how to upload telemetry data to an analytics endpoint, these are generic implementation templates for developers to integrate into their own apps. No hardcoded credentials, sensitive file access, or actual exfiltration endpoints were found.
- [PROMPT_INJECTION]: The instructions are descriptive and technical, containing no attempts to override agent behavior, bypass safety filters, or extract system prompts.
- [OBFUSCATION]: Analysis of the markdown and configuration files revealed no hidden characters, encoded payloads, homoglyph substitutions, or other obfuscation techniques.
Audit Metadata