ios-security
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of markdown documentation providing security guidance. It does not contain any executable scripts, command line instructions, or code that could be misused.
- [EXTERNAL_DOWNLOADS]: The skill references documentation and services from well-known organizations (Apple, Google/Firebase, Sentry). These references are neutral and used for legitimate development purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies potential attack vectors in iOS applications such as Universal Links and URL schemes. It correctly instructs developers to validate all incoming data and maintain narrow trust boundaries, which is a defensive security measure.
- Ingestion points:
references/current-guidance.md(Universal Links, URL schemes, pasteboard, WebView messages). - Boundary markers: The skill mandates treating these as trust boundaries and validating incoming links.
- Capability inventory: No scripts or tools are provided in the skill.
- Sanitization: Instructions require validation of origin, target, and action for all external payloads.
Audit Metadata