ios-networking
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides high-quality documentation and code implementation patterns for iOS networking that align with security best practices. All external links point to documentation resources.
- [DATA_EXFILTRATION]: The
LoggingMiddlewareimplementation inreferences/resilience-security-and-streaming.mdincludes logic to explicitly redact theAuthorizationheader, preventing sensitive credentials from being exposed in debug logs. - [CREDENTIALS_UNSAFE]: The evaluation requirements in
evals/evals.jsoncorrectly identify that sensitive tokens should be stored in the Keychain rather thanUserDefaults, promoting secure credential management. - [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing external API data. 1. Ingestion points:
APIClient.request(viaURLSession.data(for:)) inreferences/api-client-and-request-building.md. 2. Boundary markers: The implementation includes HTTP status code validation (200-299) to verify response integrity. 3. Capability inventory: The skill demonstrates network tasks (URLSession) and local file system operations (FileManager). 4. Sanitization: Data is parsed using structuredJSONDecoderinterfaces, which mitigates raw data injection risks into application logic.
Audit Metadata