uikit-app-modernization
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill operates by ingesting and analyzing untrusted data in the form of Objective-C and Swift source code, which creates a surface for indirect prompt injection attacks where malicious instructions might be hidden in code comments or string literals. \n
- Ingestion points: Source code files (.swift, .m, .h) and Info.plist files identified in the detection phase. \n
- Boundary markers: There are no explicit instructions or delimiters defined to distinguish between the skill's instructions and potentially malicious content within the analyzed files. \n
- Capability inventory: The skill has the capability to modify project source code and structural files like the Xcode project file (.pbxproj) and property lists (Info.plist). \n
- Sanitization: The skill lacks logic for sanitizing or escaping content retrieved from external files before processing.
Audit Metadata