build-time-secret-injection
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process project configuration files (Info.plist, Project.swift) and environment variables, which serve as ingestion points for external data. Capability inventory includes the generation of shell scripts and modification of application code. Boundary markers are established through the use of specific substitution tokens, and sanitization is implemented via runtime guards that validate the content and reject unresolved substitution strings.
- [DYNAMIC_EXECUTION]: The skill includes templates for generating shell scripts, specifically
ci_post_clone.sh, which are executed during the CI build process. These scripts are used to map environment variables to configuration files, which is a standard and expected practice for secret management in automated build environments like Xcode Cloud. - [EXTERNAL_DOWNLOADS]: The skill references official developer documentation from Apple and Google for technical verification. These references provide technical context and implementation guidelines from well-known and trusted sources, and they do not involve downloading or executing external scripts.
Audit Metadata