bridge-js
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions facilitate the download and installation of the Swift toolchain and the WebAssembly SDK from official repositories at swift.org. These downloads are fundamental requirements for the stated purpose of WebAssembly development.\n- [COMMAND_EXECUTION]: The workflow requires executing various command-line tools including swift package, swift sdk, and node scripts to manage dependencies and build the project. It also utilizes the --disable-sandbox flag for running tests, which is a documented requirement for executing WebAssembly tests in non-sandboxed JavaScript environments.\n- [DYNAMIC_EXECUTION]: BridgeJS generates Swift interop code at build time using macros and a TypeScript-to-Swift compiler script (ts2swift.js). This automated code generation is the primary mechanism for creating the interface bindings between the two languages.\n- [INDIRECT_PROMPT_INJECTION]: The tool ingests external TypeScript declaration files (.d.ts) to generate Swift bindings, representing a standard attack surface for development tools that process external interface definitions, though this is mitigated by the tool's intended use within a managed build pipeline.
Audit Metadata