setup-routing

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs local system discovery to configure project settings. It uses ls to check for framework installations in the user's home directory, security find-identity to retrieve Apple Team IDs, and xcrun simctl to identify available iOS simulators for the project environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill generates a configuration file by interpolating user-provided text such as project descriptions and tech stack details. This file provides instructions for future agent sessions. While inherent to the skill's purpose, this ingestion of unvalidated user data into a prompt-bearing file represents a standard indirect injection surface, as the generated output does not employ specific boundary markers or sanitization logic for the interpolated fields.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 03:22 AM
Security Audit — agent-trust-hub — setup-routing