ios-ettrace-performance
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the ETTrace runner CLI using Homebrew from
emergetools/homebrew-tap/ettraceand clones the source code repository fromhttps://github.com/EmergeTools/ETTraceto build the simulator framework. - [COMMAND_EXECUTION]: Performs extensive local command execution using
xcodebuildfor framework compilation,dwarfdumpfor UUID verification, and shell scripts for environment setup and dSYM management. - [PROMPT_INJECTION]: Identifies an indirect prompt injection surface in
scripts/analyze_flamegraph_json.py. The script processesoutput_*.jsonfiles and outputs frame names directly to the summary. - Ingestion points: Reads trace data from
output_*.jsonfiles in theRUN_DIR(referenced inSKILL.md). - Boundary markers: No delimiters or instructions are used to distinguish trace data from agent instructions in the output summary.
- Capability inventory: Across
SKILL.mdand referenced scripts, capabilities include file system writes, shell command execution (brew,git,xcodebuild,cp,rm), and running local Python and Bash scripts. - Sanitization: There is no sanitization or escaping of the symbol names extracted from the JSON before they are printed to the summary, allowing potentially malicious symbol names to enter the agent's context.
Audit Metadata