test-mobile-editing
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute several shell commands, including
pnpm,bash,gradlew, andadb, to run tests, build mobile applications, and manage emulators/simulators. - [INDIRECT_PROMPT_INJECTION]: The skill operates on local source code and test fixtures which constitutes an attack surface.
- Ingestion points: The agent interacts with files located in
apps/mobile/modules/remote-text-inputandtests/native/. - Boundary markers: None identified; there are no explicit delimiters or safety instructions provided for processing external test data.
- Capability inventory: The skill has capabilities for shell command execution (
pnpm,bash), file system writes (/tmp/opensteer-mobile-editing), and mobile device control (adb,gradlew). - Sanitization: No sanitization or validation of the files being tested is described before execution.
Audit Metadata