screenshot
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied input via the
$ARGUMENTSvariable and is instructed to follow instructions contained within that data after capturing a screenshot. This establishes a surface where malicious instructions embedded in untrusted data could influence agent behavior.\n - Ingestion points:
$ARGUMENTSvariable inSKILL.md.\n - Boundary markers: None explicitly defined to separate data from instructions.\n
- Capability inventory: Shell command execution including
xcrun,mkdir,sed, andaxeacrossSKILL.mdandreferences/advanced.md.\n - Sanitization: None present.\n- [COMMAND_EXECUTION]: The skill uses local shell commands to manage the iOS Simulator and the local filesystem for screenshot storage.\n
- Evidence: Executing
xcrun simctlfor capturing screenshots andmkdirfor directory creation as defined inSKILL.mdandreferences/advanced.md.
Audit Metadata