click-target
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- Interaction with XR Environment Data: The skill processes data from the XR scene hierarchy and browser console logs to identify objects and verify interaction results. This represents a potential surface for indirect prompt injection where instructions could be embedded in the scene metadata or log messages. While this is a standard requirement for the skill's operation, it warrants consideration regarding the trust level of the environments being tested.
- Ingestion points: The skill ingests data via the
$ARGUMENTSvariable, themcp__iwsdk-dev-mcp__scene_get_hierarchytool, and themcp__iwsdk-dev-mcp__browser_get_console_logstool. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the workflow for these data sources.
- Capability inventory: The skill utilizes tools to manipulate XR device transforms (
xr_set_transform), orient the view (xr_look_at), capture screenshots (browser_screenshot), and perform click actions (xr_select). - Sanitization: The skill does not implement specific sanitization or filtering for the data retrieved from the XR environment or logs before processing.
Audit Metadata