ios-screenshot-taker
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard iOS development tools, specifically
xcodebuildandxcrun simctl, to build applications and capture screenshots from the iOS simulator. These operations are performed via a provided shell script (scripts/take_ios_screenshots.sh) or manual sequences. - [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by ingesting external data such as Xcode workspace names, schemes, and application states (e.g., via
--screensor--app-args). - Ingestion points: User-provided arguments for project names, schemes, and app states in
SKILL.mdandreferences/screenshot-runbook.md. - Boundary markers: None explicitly defined for these arguments.
- Capability inventory: Execution of shell commands for building and simulator management.
- Sanitization: Not explicitly described; the skill relies on the user providing valid project configurations.
Audit Metadata