asc-shots-pipeline

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the koubou Python package from a public registry and executes kou setup-frames, which downloads external device frame assets from a remote source.
  • [COMMAND_EXECUTION]: The automation process involves executing multiple shell commands using tools like xcodebuild, simctl, asc, and axe to build the application, manage the simulator, and perform UI actions.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external files and tool outputs to drive its logic, which presents a surface for indirect prompt injection.
  • Ingestion points: Configuration data is read from .asc/screenshots.json, and UI hierarchies are parsed from axe describe-ui output within the SKILL.md workflows.
  • Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between its core instructions and the data processed from these external sources.
  • Capability inventory: The skill utilizes capabilities including shell command execution (xcodebuild, simctl, asc, axe, kou), file system writes for screenshots, and network operations for asset uploads and downloads.
  • Sanitization: No sanitization or validation mechanisms are described for the content ingested from the plan files or UI automation outputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 02:33 PM