mobile-dev-environment
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a Node.js setup script from NodeSource (a well-known service) and provides links to official installers from Google, Apple, and Azul.
- [COMMAND_EXECUTION]: The skill performs environment checks using version-querying commands for Node.js, git, Java, and platform-specific build tools. It also modifies shell profile files to configure environment variables.
- [PRIVILEGE_ESCALATION]: Administrative privileges via
sudoare used for installing system-level dependencies such as the NodeSource distribution, OpenJDK, and CocoaPods. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied information about their development framework and target platform to recommend specific shell commands and environment variable configurations. Evidence: 1. Ingestion points: User statements regarding framework and platform (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Subprocess execution and shell profile modification (SKILL.md). 4. Sanitization: Absent.
Audit Metadata