verify-swiftui-parity
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The instructions guide the agent to run a bundled script (
scripts/native-port.mjs) and platform-specific build tools (Xcode, XCUITest). While necessary for verification, executing these tools provides the agent with system-level access to the build environment. The skill mitigates this by specifying that all artifacts must be stored in restricted directories. - Indirect Prompt Injection: The skill processes external 'parity contracts' and 'source evidence', creating an ingestion surface for potentially untrusted data. Instructions lack specific boundary markers for this data, but include a 'Safety contract' that inventories capabilities and prohibits using real credentials or production backends, providing a layer of protection against accidental or intentional misuse.
Audit Metadata