skills/vercel-labs/emulate/apple/Gen Agent Trust Hub

apple

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Execution of Development Utilities: The skill utilizes npx to download and execute the emulate utility for Apple service emulation. This is a common pattern for local development environments to avoid global installation of tools.
  • Local Command Interaction: The skill provides curl commands intended for interacting with the emulator running on localhost. These commands are used to test OIDC discovery, token exchange, and revocation endpoints within a local network context.
  • Configuration Processing: The skill accepts user-defined YAML configurations to seed the emulator with mock users and OAuth clients. While this involves processing external data, it is a standard feature for configuring mock environments.
  • Dynamic Context Injection Surface: The skill description and usage examples suggest an interface for the agent to execute shell commands (e.g., npx, curl) to manage the emulator state and verify flows.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 09:59 AM
Security Audit — agent-trust-hub — apple