ios-security-review
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and secure implementation guidelines for iOS security. All code snippets are pedagogical and demonstrate security best practices, such as using Keychain Services for sensitive data instead of UserDefaults, and properly configuring App Transport Security (ATS).
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external code and configurations provided by the user (e.g., when identifying vulnerabilities in iOS applications). This functionality creates a surface for indirect prompt injection via the analyzed source code. The skill lacks explicit boundary markers or sanitization for this untrusted input; however, its defined capabilities are limited to generating structured analysis reports and providing guidance, with no evidence of automated command execution, network exfiltration, or file system modifications associated with the processing of this data.
Audit Metadata