add-app-clip
Fail
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: HIGHCOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to execute
bunx setup-safariandbunx testflight. These commands download and run code from NPM without version pinning or source verification. These are non-standard tools for the Expo ecosystem. - [CREDENTIALS_UNSAFE]: The execution of unverified CLI tools like
setup-safariandtestflightspecifically for the purpose of logging into Apple Developer accounts presents a high risk of credential harvesting. - [EXTERNAL_DOWNLOADS]: The skill depends on external packages (
setup-safari,testflight,@bacons/apple-targets) and directs users to external documentation on the domainsosumi.ai, which is not a recognized official service. - [PROMPT_INJECTION]: The skill's metadata claims it is 'official' and sourced from the 'expo/skills' repository, despite being authored by a third party. This deceptive behavior is a form of metadata poisoning intended to build false trust. Additionally, the skill creates project configuration and metadata files (AASA, Info.plist) which establishes a surface for potential indirect prompt injection from external data sources.
Recommendations
- AI detected serious security threats
Audit Metadata