setup-routing
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs local system discovery to configure project settings. It uses
lsto check for framework installations in the user's home directory,security find-identityto retrieve Apple Team IDs, andxcrun simctlto identify available iOS simulators for the project environment. - [INDIRECT_PROMPT_INJECTION]: The skill generates a configuration file by interpolating user-provided text such as project descriptions and tech stack details. This file provides instructions for future agent sessions. While inherent to the skill's purpose, this ingestion of unvalidated user data into a prompt-bearing file represents a standard indirect injection surface, as the generated output does not employ specific boundary markers or sanitization logic for the interpolated fields.
Audit Metadata