codemagic-builds
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local Python scripts to interact with the Codemagic API. These scripts are invoked to list builds, fetch logs, manage environment variables, and control build lifecycles.
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to well-known service domains to function: * Fetches the OpenAPI v3 schema from
codemagic.ioto maintain up-to-date API endpoints. * Retrieves build metadata, status updates, and build logs fromapi.codemagic.io. - [PROMPT_INJECTION]: The skill processes external, potentially attacker-controlled data, creating a surface for indirect prompt injection. * Ingestion points: Build logs, commit messages, and failure summaries are retrieved from the Codemagic API and presented to the agent. * Boundary markers: The scripts do not use specific delimiters or include instructions for the agent to ignore instructions embedded within the build data. * Capability inventory: The skill allows the agent to start builds, cancel running builds, and modify application environment variables. * Sanitization: There is no evidence of sanitization or filtering applied to the logs or commit messages before they are processed by the agent.
Audit Metadata