ios-init
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to initialize project documentation (CLAUDE.md, ARCHITECTURE.md, README.md, etc.) and repository configuration files.
- [DATA_EXPOSURE]: The skill scans the local filesystem for project structure and technical stack (e.g., searching for Swift files, Xcode projects, and dependencies). This access is necessary for its stated purpose of project initialization and does not involve exfiltration to external domains.
- [COMMAND_EXECUTION]: The skill suggests running standard Git commands such as
git addto stage the generated files, which is a routine developer workflow. - [PROMPT_INJECTION]: The skill ingests user-provided text (a project description) and source code content to pre-fill project documentation. While this creates an indirect prompt injection surface, it is a functional requirement for the skill's purpose, and the agent is instructed to use the data for generating documentation rather than executing it as instructions.
Audit Metadata