ios-memgraph-leaks
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard macOS developer tools including
leaks,xcrun simctl, andlaunchctlto inspect process memory and simulator state. These operations are essential to the skill's stated purpose of memory debugging. Evidence:scripts/capture_sim_memgraph.shusesxcrun simctlto interact with simulators andleaksto generate memgraphs. Evidence:scripts/summarize_memgraph_leaks.pyusessubprocess.runwith list-based arguments to invoke theleaksutility safely, avoiding shell injection vulnerabilities. - [SAFE]: The skill follows security best practices for local utility scripts. No network operations or external data exfiltration patterns were detected. All external tool invocations use quoted variables or list-based arguments to prevent command injection. Temporary files are handled using
mktempand bundle identifiers are sanitized to prevent path manipulation. The skill also parses memory content from local processes; while this represents a potential ingestion point for untrusted data (Indirect Prompt Injection surface), the risk is mitigated by the use of structured regex parsing and isolating output in markdown code blocks. Ingestion points:scripts/summarize_memgraph_leaks.pyreading output from theleakscommand; Boundary markers: Excerpts are enclosed in markdown code blocks (~~~text); Capability inventory: Subprocess calls to standard binaries; Sanitization: Regular expression field extraction instead of raw interpolation.
Audit Metadata