apple-docs
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
apple-docs-2.0-mcppackage vianpx. This involves downloading and executing code from the public NPM registry to enable the tool's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the retrieval of external data from Apple's documentation and WWDC transcripts, creating a surface for indirect prompt injection.
- Ingestion points: External data enters the agent context via the
get_apple_doc_contentandget_wwdc_videotools (SKILL.md). - Boundary markers: The instructions do not specify any delimiters or warnings to ignore instructions embedded in the retrieved documentation.
- Capability inventory: The skill utilizes MCP tools to search documentation, read page contents, and fetch code examples (SKILL.md).
- Sanitization: No explicit sanitization, escaping, or validation of the external content is mentioned in the skill instructions.
Audit Metadata