simulator-screenshot-time
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the xcrun simctl utility to override simulator status bar parameters like time, battery level, and cellular signal.
- [INDIRECT_PROMPT_INJECTION]: User-controlled data provided via the $ARGUMENTS variable is interpolated into shell commands.
- Ingestion points: The $ARGUMENTS variable in SKILL.md acts as a conduit for untrusted data.
- Boundary markers: No delimiters or instructions are present to prevent user input from breaking out of the intended command context.
- Capability inventory: The skill possesses the ability to execute shell commands through the pre-installed xcrun utility.
- Sanitization: There is no logic for escaping or validating shell metacharacters in the user-provided time or other argument values.
Audit Metadata