appium-windows-driver
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation includes examples of executing PowerShell commands using the
appium:prerunandappium:postruncapability hooks for environment management.- [COMMAND_EXECUTION]: The CI reference guide provides a command to modify the Windows Registry (reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock") to enable Developer Mode, which is a system-level configuration.- [EXTERNAL_DOWNLOADS]: The skill utilizes theappium driver run windows install-wadcommand to fetch and install the WinAppDriver service from an external remote source.- [REMOTE_CODE_EXECUTION]: The Appium Windows driver supports the execution of arbitrary PowerShell scripts provided via session capabilities, which are executed on the host system during the automation session.- [PROMPT_INJECTION]: The skill demonstrates an indirect prompt injection surface by ingesting script content through session capabilities (appium:prerun,appium:postrun) without explicit boundary markers or sanitization, which could lead to unauthorized command execution if the agent populates these fields with untrusted data.
Audit Metadata