appium-skill
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill mentions the
appium --relaxed-securityflag in its quick reference guide. While this flag allows the Appium server to execute shell commands on the connected device (which could be a risk in untrusted environments), it is a standard administrative feature for mobile automation tasks like system settings modification or file management. - [DATA_EXPOSURE]: The skill demonstrates secure handling of sensitive information by instructing the agent to retrieve credentials from environment variables (
LT_USERNAME,LT_ACCESS_KEY) rather than hardcoding them into the generated source code. - [EXTERNAL_DOWNLOADS]: The skill references standard, reputable libraries for mobile automation, including
io.appium:java-clientfor Java,Appium-Python-Clientfor Python, andwebdriveriofor JavaScript. These are well-established packages in the developer community. - [REMOTE_CODE_EXECUTION]: The skill includes instructions for interacting with remote hubs and API endpoints belonging to LambdaTest (a well-known cloud testing service). These connections are necessary for the skill's primary purpose of running mobile tests on a real device farm.
Audit Metadata