swift-mcp-server-generator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The generated
Package.swifttemplate includes dependencies from the officialmodelcontextprotocolandappleGitHub organizations, as well as the well-knownswift-servercommunity organization. - [INDIRECT_PROMPT_INJECTION]: The skill provides templates that ingest untrusted data from an MCP client through tool arguments (e.g.,
namein the greet tool) and prompt arguments (e.g.,languageandfocusin the code-review prompt). - Ingestion points: Arguments extracted from
params.argumentsinToolHandlers.swiftandPromptHandlers.swifttemplates. - Boundary markers: The templates do not implement specific delimiters for the interpolated strings.
- Capability inventory: The provided templates perform benign operations such as string interpolation and basic arithmetic; no file writing, network exfiltration, or shell execution capabilities are included.
- Sanitization: The templates do not include sanitization, which is typical for boilerplate code; developers should implement validation as they add more complex logic.
Audit Metadata