maestro-create-test
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from multiple sources, including the device's view hierarchy and the project's source code.
- Ingestion Points: The agent uses
user-maestro-inspect_view_hierarchyto read element text and attributes, andGrep/Globtools to read files from the workspace during the research phases. - Boundary Markers: No explicit delimiters or instructions are provided to the agent to disregard or sanitize instructions found within the ingested data.
- Capability Inventory: The agent has the ability to write files to the workspace and execute shell-level automation commands through the
run_flowandrun_flow_filestools. - Sanitization: No sanitization or validation of the ingested UI text or code content is mentioned before it is used to influence the agent's decision-making process while building the test steps.
- [DYNAMIC_EXECUTION]: The skill's primary workflow involves generating executable YAML files for the Maestro automation framework and immediately executing them to verify behavior on a live device.
- Evidence: The skill instructs the agent to scaffold a test file in Phase 4 and build steps iteratively in Phase 6, appending commands to a YAML file and running them via the
run_flowtool to confirm they work.
Audit Metadata