ios-debugger-agent
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the agent to execute build and simulation commands (e.g.,
mcp__XcodeBuildMCP__build_run_sim) which interface with local development tools likexcodebuildandsimctlto manage the iOS development environment. - [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface for indirect prompt injection by processing external data sources.
- Ingestion points: Untrusted data enters the context through simulator logs (
mcp__XcodeBuildMCP__start_sim_log_cap) and UI hierarchy descriptions (mcp__XcodeBuildMCP__describe_ui). - Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore instructions embedded within logs or UI labels.
- Capability inventory: The agent has the capability to write to the local environment through build processes and interact with simulated UI elements (tap, type, gestures).
- Sanitization: There are no explicit instructions for sanitizing or escaping content retrieved from the simulator logs or UI inspection before it is processed by the agent.
Audit Metadata