serve-sim-apple-simulator
Warn
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the serve-sim package via npx and clones the source code repository from github.com/EvanBacon/serve-sim.
- [REMOTE_CODE_EXECUTION]: Uses npx serve-sim to download and execute code from the npm registry at runtime without version pinning or source verification.
- [COMMAND_EXECUTION]: Executes several local shell commands including xcrun simctl for simulator interaction, bun for package management, and npx for tool execution.
- [DYNAMIC_EXECUTION]: Includes instructions for compiling a Swift helper binary locally using bun run build:swift, which involves runtime code generation and execution.
- [INDIRECT_PROMPT_INJECTION]: The skill creates an ingestion surface by forwarding simulator logs and MJPEG video output to the agent. Ingestion points: SSE log stream and MJPEG stream (SKILL.md). Boundary markers: Absent. Capability inventory: simctl control and gesture emulation. Sanitization: Not specified.
Audit Metadata