corebluetooth
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run a local script
scripts/inspect-project.pyto analyze Apple project source code and configuration files. This script is used for linting and identifying common Bluetooth implementation hazards, such as missing privacy descriptions or improper background mode configuration. - [DATA_EXPOSURE]: The included inspection script recursively reads file content within a target project directory to search for Core Bluetooth API patterns. This process is read-only and uses standard Python libraries without any network capabilities, ensuring that project data remains local to the execution environment.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes untrusted local project data via the inspection script, the capability is limited to identifying specific code patterns and reporting them. There are no executable side effects (like file writing or network requests) triggered by the content of the analyzed files, and the agent's instructions focus on technical implementation review.
Audit Metadata