swift-lsp

Pass

Audited by Gen Agent Trust Hub on Nov 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements standard Language Server Protocol (LSP) functionality for Swift. It relies on the presence of the official SourceKit-LSP tool, which is part of the trusted Xcode or Swift toolchain ecosystems. No malicious command execution, data exfiltration, or persistence mechanisms were detected.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it processes untrusted Swift source code.
  • Ingestion points: .swift source files (SKILL.md)
  • Boundary markers: Absent
  • Capability inventory: run_command for LSP interaction (SKILL.md)
  • Sanitization: Absent. While the surface exists, this is the primary intended function of the skill and does not escalate the verdict as it is a standard implementation of a language server wrapper.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 3, 2026, 10:57 AM