install-apple-tv-app
Warn
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to "Install dependencies and build using the project's documented method." This results in the execution of shell commands found within untrusted third-party documentation.
- [REMOTE_CODE_EXECUTION]: The core functionality involves compiling and building source code from a provided project path. Malicious projects could include build-time scripts or hooks that execute harmful code on the host system during the dependency installation or compilation phase.
- [EXTERNAL_DOWNLOADS]: Building tvOS projects frequently requires downloading external dependencies via package managers (such as CocoaPods or Swift Package Manager), which introduces risks from the software supply chain.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it instructs the agent to read and follow instructions from project-specific files like AGENTS.md and README. A malicious repository could use these files to provide instructions that manipulate the agent's actions or exfiltrate data.
Audit Metadata