snap
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard iOS development tools such as
xcodebuild,xcrun simctl, andxcresulttoolfor building, running tests, and managing simulators. It also includes instructions for setting the Xcode version usingsudo xcode-selectwithin a GitHub Actions environment, which is a standard procedure for CI runners. - [EXTERNAL_DOWNLOADS]: The skill mentions several industry-standard services and tools, including fastlane, BrowserStack, Sauce Labs, and AWS Device Farm. These are recognized services for mobile app testing and do not represent a security risk.
- [PROMPT_INJECTION]: The skill processes UI hierarchy and accessibility metadata from the application under test, which acts as an ingestion point for external data. Ingestion points: UI metadata and element labels accessed via
XCUIApplicationqueries (reference/xcuitest-patterns.md, reference/identifier-strategy.md). Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore embedded instructions in the UI labels. Capability inventory: The skill utilizes shell command execution for running tests and file system operations for saving screenshots (reference/ci-integration.md, reference/screenshot-strategies.md). Sanitization: The skill follows standard XCTest interaction patterns without implementing custom validation or filtering of UI content.
Audit Metadata