asc-shots-pipeline
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
koubouPython package from a public registry and executeskou setup-frames, which downloads external device frame assets from a remote source. - [COMMAND_EXECUTION]: The automation process involves executing multiple shell commands using tools like
xcodebuild,simctl,asc, andaxeto build the application, manage the simulator, and perform UI actions. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external files and tool outputs to drive its logic, which presents a surface for indirect prompt injection.
- Ingestion points: Configuration data is read from
.asc/screenshots.json, and UI hierarchies are parsed fromaxe describe-uioutput within the SKILL.md workflows. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between its core instructions and the data processed from these external sources.
- Capability inventory: The skill utilizes capabilities including shell command execution (
xcodebuild,simctl,asc,axe,kou), file system writes for screenshots, and network operations for asset uploads and downloads. - Sanitization: No sanitization or validation mechanisms are described for the content ingested from the plan files or UI automation outputs.
Audit Metadata