ios-memgraph-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python scripts to invoke system diagnostic tools including
leaks,xcrun,heap, andvmmap. - Evidence:
scripts/capture_sim_memgraph.pyandscripts/summarize_memgraph.pyutilizesubprocess.runto execute these commands. - Security Note: All commands are passed as argument lists rather than shell strings, which effectively prevents shell injection vulnerabilities. The tools invoked are well-known Apple developer utilities.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and parses text output from the
leakscommand-line tool. - Ingestion points:
scripts/summarize_memgraph.pyparses the output ofleaks --listto identify memory addresses and type hints. - Capability inventory: The skill has the capability to write diagnostic artifacts to local directories and execute further diagnostic commands based on the parsed addresses.
- Sanitization: The script uses specific regular expressions to extract structured data from the tool's text output, mitigating the risk of raw content influencing agent behavior directly. While a malicious application could theoretically craft memory metadata strings to appear in the tool output, this constitutes a low-risk diagnostic surface.
Audit Metadata