The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The file MAESTRO.md provides an installation command curl -fsSL "https://get.maestro.mobile.dev" | bash to fetch and execute the Maestro CLI setup script from the tool's official domain.
[COMMAND_EXECUTION]: The instructions throughout MAESTRO.md and FLUTTER.md describe executing various system and development commands including adb for Android interaction, xcodebuild and plutil for iOS simulator configuration, and brew for package management.
[INDIRECT_PROMPT_INJECTION]: The skill defines a surface for indirect prompt injection by processing untrusted data from external services:
Ingestion points: Test flows ingest content from external mail service APIs (e.g., Mailpit via GET /api/v1/messages) to retrieve OTP codes, as described in MAESTRO.md.
Boundary markers: The skill does not recommend the use of delimiters or specific instructions to ignore embedded commands within the fetched data.
Capability inventory: The environment supports execution of shell commands (maestro test), mobile device manipulation (adb, xcodebuild), and network operations via JavaScript.
Sanitization: No sanitization or validation logic is defined for the data retrieved from external API responses before interpolation into test steps.
[DYNAMIC_EXECUTION]: In MAESTRO.md, the skill recommends executing a local mock API server using npx tsx scripts/mock-api-server.ts, which involves running locally generated or provided scripts at runtime.
[EXTERNAL_DOWNLOADS]: The skill fetches configuration rules and citations from external repositories including mobile-dev-inc/maestro-docs and tovimx/maestro-mobile-testing-skill, and provides direct links to official Maestro Studio binaries hosted on studio.maestro.dev.

maestro