vpn
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill refers the agent to 'Official Apple docs' using URLs hosted on the
sosumi.aidomain (found inreferences/networkextension.mdandreferences/packet-tunnel-provider.md). This is a third-party domain not controlled by Apple. If the agent is configured to fetch external content, it could be exposed to untrusted documentation or data from an unverified source. - [PROMPT_INJECTION]: The skill uses deceptive labeling in its documentation. By presenting unofficial links as 'Official Apple docs', it potentially poisons the agent's context, leading it to trust third-party content as authoritative system information. This surface can be exploited for indirect prompt injection if the external domain hosts malicious instructions.
Audit Metadata