axiom-testflight-triage
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for using standard, built-in macOS and Xcode developer tools such as
xcrun atos,mdfind,dwarfdump, andmdimport. These tools are used for their intended purpose of symbolicating crash logs and searching for debug symbol (dSYM) files on the developer's local filesystem. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze external data sources, specifically iOS crash reports (.ips/.crash files) and TestFlight feedback. This establishes an ingestion point for untrusted content which could theoretically contain instructions designed to influence the agent's behavior. However, this attack surface is inherent to the skill's primary diagnostic purpose, and the instructions focus on structured analysis and specific developer workflows which naturally mitigate accidental obedience to embedded text.
Audit Metadata