agent-device
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill's primary function is to orchestrate the
agent-deviceCLI tool to perform actions like opening apps, tapping UI elements, and managing sessions. This includes abatchmode for executing sequences of commands from a JSON file. - [EXTERNAL_DOWNLOADS]: The
bootstrap-install.mdfile indicates that theinstallandreinstallcommands can accept URLs as artifact paths for downloading and installing application binaries (e.g., .apk, .ipa). - [DATA_EXFILTRATION]: The
remote-tenancy.mdreference describes how to interact with remote macOS hosts usingcurlto perform RPC calls, which involves transmitting authentication tokens and lease identifiers over the network to the daemon endpoint. - [REMOTE_CODE_EXECUTION]: The skill supports a
replaycommand that executes automation scripts from local files, which serves as a mechanism for running predefined instruction sets on target devices. - [INDIRECT_PROMPT_INJECTION]: By design, the skill reads and processes UI content via the
snapshotandget textcommands. This creates an attack surface where malicious content within a third-party application's UI could potentially influence the agent's subsequent logic or actions.
Audit Metadata