swift-testing-expert
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to override safety filters, bypass constraints, or extract system prompts were detected. The skill uses natural instructional language to scope the agent's behavior within the domain of software testing.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No sensitive file paths, hardcoded credentials, or network operations to non-whitelisted domains were found. The skill explicitly discourages hitting the real network during unit tests and provides instructions for stubbing network responses locally.
- [OBFUSCATION]: No base64, zero-width characters, homoglyphs, or other obfuscation techniques were detected. The content is fully transparent and legible.
- [REMOTE_CODE_EXECUTION]: No remote script execution or unverifiable package installations were found. The code snippets provided are static examples for development use.
- [PRIVILEGE_ESCALATION]: No use of sudo, chmod, or other privilege-altering commands was identified.
- [PERSISTENCE_MECHANISMS]: No attempts to establish persistence through shell profiles, cron jobs, or registry modifications were found.
- [METADATA_POISONING]: Metadata fields (name, description, author) are consistent with the skill's purpose and present no safety concerns.
- [INDIRECT_PROMPT_INJECTION]: The skill serves as a knowledge base. While it processes user queries about code, it does not interact with untrusted external data in a way that would allow for command injection or automated exploitation. No high-risk tools (like shell execution or file-system writing) are specified for use with untrusted inputs.
- [DYNAMIC_EXECUTION]: No dynamic code generation or unsafe deserialization patterns were detected.
- [DYNAMIC_CONTEXT_INJECTION]: The skill does not use shell command interpolation within its documentation or instructions.
Audit Metadata