healthkit
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions and Swift code samples for HealthKit implementation follow established security best practices, such as verifying data availability via
HKHealthStore.isHealthDataAvailable()and declaring necessary privacy usage descriptions in theInfo.plistfile. - [INDIRECT_PROMPT_INJECTION]: The skill involves reading and processing health metrics from external system sources. While this presents a potential attack surface, the data types involved (such as heart rate and step counts) are structured numerical quantities, which inherently minimize the risk of indirect prompt injection attacks compared to free-form text inputs.
- [SAFE]: The skill contains references to HealthKit documentation on an unofficial domain (
sosumi.ai). While these are informational links and not executed code, implementations should be verified against official Apple Developer documentation to ensure accuracy and security.
Audit Metadata