screenshot-automation
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill generates a shell script (
macos-screenshot-env.sh) that modifies system-wide macOS desktop settings usingdefaults writefor the Dock, Finder, and SystemUIServer. While it includes a cleanup mechanism, these operations modify the host environment's configuration. - [COMMAND_EXECUTION]: The generated
ScreenshotExportScript.swiftcontains a helper function that executes shell commands via/bin/zsh -c. This is used to automatexcodebuildtesting, simulator management viasimctl, and file system cleanup operations. - [EXTERNAL_DOWNLOADS]: The skill's documentation and generated export script recommend the installation of
xcparse, an external third-party tool, via Homebrew to facilitate the extraction of screenshot attachments from Xcode result bundles. - [PROMPT_INJECTION]: Indirect surface: The skill's generation logic ingests content from the local
templates.mdfile. While this represents a standard data ingestion point, it creates a theoretical surface for indirect prompt injection if the source templates were to be manipulated by an external actor.
Audit Metadata