apple-design-hig
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The utility script
scripts/hig_catalog.pyperforms network requests to fetch the live Human Interface Guidelines catalog fromdeveloper.apple.com. This domain is an official source of Apple documentation and is considered a well-known, trusted service.\n- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external data by fetching and displaying documentation from Apple's developer website.\n - Ingestion points: Content from Apple's DocC JSON is fetched and printed to the standard output, which the agent then interprets (
scripts/hig_catalog.py).\n - Boundary markers: No explicit boundary markers are used in the script's output to separate external content from instructions.\n
- Capability inventory: The skill possesses the ability to execute a local Python script and perform network operations.\n
- Sanitization: The content is parsed as standard JSON and formatted as Markdown text; no executable code is extracted or run from the external data.\n- [COMMAND_EXECUTION]: The
SKILL.mdinstructions authorize the execution of the local Python scriptscripts/hig_catalog.pyto facilitate the discovery and retrieval of Apple's design guidelines.
Audit Metadata