run-tests
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests and processes untrusted data from the local environment.\n
- Ingestion points: The skill reads local Swift test files and captures output from
xcodebuildandgit statusto display results.\n - Boundary markers: No explicit delimiters or instructions are used to separate the ingested data from the agent's operational instructions.\n
- Capability inventory: The skill has the capability to execute system commands via
Bash, read files from the filesystem, and write reports to the.agents/research/directory.\n - Sanitization: There is no evidence of sanitization, escaping, or validation of the content read from files or captured from command outputs.\n- [COMMAND_EXECUTION]: The skill performs several command-line operations using the
Bashtool to automate the development workflow.\n - Evidence: It executes
xcodebuildfor running tests,gitfor repository status and commits, andxcrun simctlorkillallfor simulator management.\n - Safety features: Destructive actions like file deletion (clearing
DerivedData) or committing changes are protected by theAskUserQuestiontool, requiring explicit user consent before execution.\n - Context: All commands are standard for iOS/macOS development and target specific, expected directories and services.
Audit Metadata