apple
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Execution of Development Utilities: The skill utilizes
npxto download and execute theemulateutility for Apple service emulation. This is a common pattern for local development environments to avoid global installation of tools. - Local Command Interaction: The skill provides
curlcommands intended for interacting with the emulator running onlocalhost. These commands are used to test OIDC discovery, token exchange, and revocation endpoints within a local network context. - Configuration Processing: The skill accepts user-defined YAML configurations to seed the emulator with mock users and OAuth clients. While this involves processing external data, it is a standard feature for configuring mock environments.
- Dynamic Context Injection Surface: The skill description and usage examples suggest an interface for the agent to execute shell commands (e.g.,
npx,curl) to manage the emulator state and verify flows.
Audit Metadata