asc-shots-pipeline
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies extensively on executing shell commands to manage the iOS build and simulation lifecycle.
- Evidence: Instructions include execution of
xcodebuild,xcrun simctl, and theascCLI tool for app deployment and interaction. - Parallel execution patterns utilize
xargsand background shell processes to orchestrate multiple simulator instances simultaneously. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of a third-party Python package to handle screenshot framing.
- Evidence: Explicit instruction to run
pip install koubou==0.13.0for deterministic framing output. - [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by ingesting and acting upon untrusted local configuration data.
- Ingestion points: The skill reads orchestration logic and app parameters from
.asc/shots.settings.jsonand.asc/screenshots.json(SKILL.md). - Boundary markers: No explicit delimiters or instructions to ignore embedded commands within the configuration files are provided.
- Capability inventory: The skill can execute arbitrary build commands via
xcodebuild, manipulate simulator states viasimctl, and perform network uploads to App Store Connect via theasctool. - Sanitization: There is no evidence of validation or sanitization of the values provided in the JSON configuration files before they are interpolated into shell commands.
Audit Metadata