axiom-testflight-triage

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides instructions for using standard, built-in macOS and Xcode developer tools such as xcrun atos, mdfind, dwarfdump, and mdimport. These tools are used for their intended purpose of symbolicating crash logs and searching for debug symbol (dSYM) files on the developer's local filesystem.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze external data sources, specifically iOS crash reports (.ips/.crash files) and TestFlight feedback. This establishes an ingestion point for untrusted content which could theoretically contain instructions designed to influence the agent's behavior. However, this attack surface is inherent to the skill's primary diagnostic purpose, and the instructions focus on structured analysis and specific developer workflows which naturally mitigate accidental obedience to embedded text.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 12:42 AM