appium-skill

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill mentions the appium --relaxed-security flag in its quick reference guide. While this flag allows the Appium server to execute shell commands on the connected device (which could be a risk in untrusted environments), it is a standard administrative feature for mobile automation tasks like system settings modification or file management.
  • [DATA_EXPOSURE]: The skill demonstrates secure handling of sensitive information by instructing the agent to retrieve credentials from environment variables (LT_USERNAME, LT_ACCESS_KEY) rather than hardcoding them into the generated source code.
  • [EXTERNAL_DOWNLOADS]: The skill references standard, reputable libraries for mobile automation, including io.appium:java-client for Java, Appium-Python-Client for Python, and webdriverio for JavaScript. These are well-established packages in the developer community.
  • [REMOTE_CODE_EXECUTION]: The skill includes instructions for interacting with remote hubs and API endpoints belonging to LambdaTest (a well-known cloud testing service). These connections are necessary for the skill's primary purpose of running mobile tests on a real device farm.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 09:14 AM
Security Audit — agent-trust-hub — appium-skill