ios-android-logs
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill suggests the installation of the
pidcatutility usingpip install pidcat. This downloads code from the public PyPI registry. - [COMMAND_EXECUTION]: The instructions include numerous shell commands using
adb,xcrun,grep, andpip. These commands are used to interact with mobile devices, simulators, and the host file system (e.g., writing logs tologs.txt). - [INDIRECT_PROMPT_INJECTION]: The skill is designed to facilitate the ingestion and processing of device logs, which contain data generated by third-party applications.
- Ingestion points: System log streams from
adb logcatandxcrun devicectl(referenced inSKILL.md). - Boundary markers: None specified for isolating or delimiting external log content within the agent's context.
- Capability inventory: File system writing (
> logs.txt), command execution, and MCP tool integration for programmatic log access. - Sanitization: No sanitization or filtering logic is provided to handle potentially malicious instructions embedded within application logs.
Audit Metadata