appium-windows-driver

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill documentation includes examples of executing PowerShell commands using the appium:prerun and appium:postrun capability hooks for environment management.- [COMMAND_EXECUTION]: The CI reference guide provides a command to modify the Windows Registry (reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock") to enable Developer Mode, which is a system-level configuration.- [EXTERNAL_DOWNLOADS]: The skill utilizes the appium driver run windows install-wad command to fetch and install the WinAppDriver service from an external remote source.- [REMOTE_CODE_EXECUTION]: The Appium Windows driver supports the execution of arbitrary PowerShell scripts provided via session capabilities, which are executed on the host system during the automation session.- [PROMPT_INJECTION]: The skill demonstrates an indirect prompt injection surface by ingesting script content through session capabilities (appium:prerun, appium:postrun) without explicit boundary markers or sanitization, which could lead to unauthorized command execution if the agent populates these fields with untrusted data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 10:51 AM
Security Audit — agent-trust-hub — appium-windows-driver