prepare-mobile-golden
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of several shell commands, including archiving utilities (
tar), Apple's build tools (xcodebuild), and project-specific testing scripts (pnpm test:vm). It also includes a pattern for executing arbitrary user-defined commands within the VM context (bash -c '...; YOUR_COMMAND'). - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external files provided by the user, specifically
xcode.tar,runtime.tar, and amanifest.jsonfile. The instructions include a self-verification mechanism where themanifest.jsonis used to validate the integrity of the archives via SHA-256 hashes before they are processed by the provisioning scripts.
Audit Metadata