vpn

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill refers the agent to 'Official Apple docs' using URLs hosted on the sosumi.ai domain (found in references/networkextension.md and references/packet-tunnel-provider.md). This is a third-party domain not controlled by Apple. If the agent is configured to fetch external content, it could be exposed to untrusted documentation or data from an unverified source.
  • [PROMPT_INJECTION]: The skill uses deceptive labeling in its documentation. By presenting unofficial links as 'Official Apple docs', it potentially poisons the agent's context, leading it to trust third-party content as authoritative system information. This surface can be exploited for indirect prompt injection if the external domain hosts malicious instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 08:52 PM