argent-tv-interact
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes UI element trees and labels from external TV applications, creating a surface for indirect instructions.- Ingestion points: The
describetool returns element labels, selected states, and text content from the active TV application screen (SKILL.md).- Boundary markers: The skill does not provide instructions to the agent to treat UI content as untrusted data or use specific delimiters to separate application data from instructions (SKILL.md).- Capability inventory: The agent has access tokeyboardfor text input,open-urlfor deep linking,tv-remotefor navigation, anddebugger-evaluatefor JavaScript execution in the target runtime (SKILL.md).- Sanitization: No sanitization, filtering, or validation logic is specified for the UI data ingested by thedescribetool before the agent processes it (SKILL.md).- [COMMAND_EXECUTION]: The skill utilizes host-side CLI tools to manage and interact with TV devices.- The agent is instructed to useadbfor Android TV (leanback) interactions,xcrun simctlfor Apple TV simulator commands, and thevegaandvsmCLI tools for Amazon Fire TV (Vega) management (SKILL.md).- [DYNAMIC_EXECUTION]: The skill includes tools to evaluate code within the target application's runtime for debugging.- Thedebugger-evaluatetool allows the agent to execute JavaScript directly in the TV application's runtime on Vega devices (SKILL.md).
Audit Metadata