whats-new
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes
GlobandGreptools to search for existing changelog or version tracking implementations within the project. This is a legitimate step to ensure the generated code does not conflict with existing files. - [EXTERNAL_DOWNLOADS]: The skill includes a template for
RemoteWhatsNewProvider.swiftwhich contains code usingURLSessionto fetch JSON from a remote endpoint. This code is intended to be integrated into the user's application and is not executed by the AI agent itself during the skill's operation. - [COMMAND_EXECUTION]: Although
Bashis listed in theallowed-toolsfrontmatter, the skill instructions do not invoke any shell commands. The tool is likely included for general environment setup or file manipulation which is standard for developer-oriented skills. - [SAFE]: The skill follows best practices for secret management by not requesting or hardcoding API keys, and instead uses standard platform APIs like
UserDefaultsfor local persistence in the generated templates.
Audit Metadata