skills/simota/agent-skills/snap/Gen Agent Trust Hub

snap

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard iOS development tools such as xcodebuild, xcrun simctl, and xcresulttool for building, running tests, and managing simulators. It also includes instructions for setting the Xcode version using sudo xcode-select within a GitHub Actions environment, which is a standard procedure for CI runners.
  • [EXTERNAL_DOWNLOADS]: The skill mentions several industry-standard services and tools, including fastlane, BrowserStack, Sauce Labs, and AWS Device Farm. These are recognized services for mobile app testing and do not represent a security risk.
  • [PROMPT_INJECTION]: The skill processes UI hierarchy and accessibility metadata from the application under test, which acts as an ingestion point for external data. Ingestion points: UI metadata and element labels accessed via XCUIApplication queries (reference/xcuitest-patterns.md, reference/identifier-strategy.md). Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore embedded instructions in the UI labels. Capability inventory: The skill utilizes shell command execution for running tests and file system operations for saving screenshots (reference/ci-integration.md, reference/screenshot-strategies.md). Sanitization: The skill follows standard XCTest interaction patterns without implementing custom validation or filtering of UI content.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 12:26 AM
Security Audit — agent-trust-hub — snap