ios-device-toolkit
Warn
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes sudo pymobiledevice3 remote tunneld to enable developer mode services on iOS 17+ devices. While documented as a requirement for the tool's functionality, this grants the agent administrative privileges to bind to network interfaces and handle RSD sessions.
- [PROMPT_INJECTION]: The skill provides an attack surface for indirect prompt injection by ingesting untrusted data from connected iOS devices.
- Ingestion points: Data is read from the device via syslog live, apps pull, afc pull, and pcap commands in SKILL.md and the reference documents.
- Boundary markers: The skill lacks explicit instructions or markers to distinguish between legitimate device data and potential embedded instructions.
- Capability inventory: The skill provides extensive access to device management, file transfers, and network monitoring via the pymobiledevice3 CLI.
- Sanitization: No mechanisms for filtering or sanitizing device output are implemented before processing.
Audit Metadata