testing-mobile-apps
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands such as npx, xcodebuild, adb, and simctl to manage mobile testing environments. It also references bundled scripts including setup_appium.sh, run_tests.sh, and generate_report.py for automation workflows.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data that could contain malicious instructions. • Ingestion points: Mobile application artifacts (.apk, .ipa) and device output logs. • Boundary markers: No explicit delimiters or instructions are provided to the agent to distinguish between test data and instructions. • Capability inventory: The skill has access to file system tools (Read, Write, Edit) and a restricted Bash tool (test:mobile-*). • Sanitization: The skill does not define methods for validating or sanitizing external application content or log data.
Audit Metadata