ios-memgraph-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The Python scripts
scripts/capture_sim_memgraph.pyandscripts/summarize_memgraph.pyutilize thesubprocess.runfunction to invoke Apple developer tools such asxcrun,simctl, andleaks. These commands are executed using list-based arguments, which is a secure practice that avoids shell injection vulnerabilities. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from
.memgraphfiles and the output of theleaksutility. The parser inscripts/summarize_memgraph.pyemploys strict regular expression patterns to extract memory addresses and object sizes, ensuring that the data is handled safely before being presented to the agent. - [DATA_EXFILTRATION]: All operations, including the capture and analysis of memory graphs, are performed locally. The skill outputs artifacts to user-defined directories on the local file system and does not contain any code for network communication or external data transmission.
Audit Metadata