AGENT LAB: SKILLS

developing-ios-apps

Fail

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: CRITICAL
Full Analysis
  • [SAFE] (SAFE): Comprehensive review of the skill files revealed no malicious instructions, exfiltration patterns, or unauthorized access attempts.
  • [COMMAND_EXECUTION] (SAFE): The skill utilizes standard iOS development tools such as xcodebuild and xcodegen for project generation and building. These are used according to best practices.
  • [DATA_EXFILTRATION] (SAFE): Automated scanner alerts for com.app and logger.info are confirmed false positives. In the context of the provided Swift code, 'com.app' is used as a placeholder string for the Apple Logger subsystem identifier, and 'logger.info' is a standard Swift logging method call. Neither represents a malicious URL or data exfiltration endpoint.
  • [EXTERNAL_DOWNLOADS] (SAFE): Referenced Swift Package Manager (SPM) dependencies point to well-known and reputable repositories on GitHub (e.g., AudioKit, Realm).
  • [PERSISTENCE] (LOW): The skill includes documentation for setting a global git proxy (git config --global). While this modifies the user's environment persistently, it is presented as a manual troubleshooting step for developers in specific network environments and is not executed automatically by a script.
Recommendations
  • Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 17, 2026, 05:02 PM