ping-orchestration-ios-davinci-sdk
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a developer tool designed to scaffold authentication flows using the official Ping Orchestration iOS SDK (DaVinci module). The implementation follows standard iOS development patterns (SwiftUI/MVVM).
- [EXTERNAL_DOWNLOADS]: The skill references the official GitHub repository for the ForgeRock/Ping Identity iOS SDK (
github.com/ForgeRock/ping-ios-sdk). This is a well-known and expected source for the vendor's components. - [COMMAND_EXECUTION]: Provides a shell script (
scripts/scaffold_auth.sh) intended for local use by the developer to organize generated files. Analysis of the script confirms it only performs routine filesystem operations (mkdir,cp) and contains no malicious logic or network calls. - [DATA_EXFILTRATION]: No sensitive data access or exfiltration patterns were detected. The skill correctly instructs the agent to prompt the user for environment-specific configuration values (Client ID, Discovery Endpoint) rather than using hardcoded secrets or attempting to harvest them from the filesystem.
- [PROMPT_INJECTION]: The instructions focus on structured code generation and user interaction. No attempts to override system prompts or bypass safety filters were found.
Audit Metadata