mobile-e2e-testing
Fail
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the Maestro CLI installation script from the official domain at
https://get.maestro.mobile.dev.\n- [REMOTE_CODE_EXECUTION]: The Maestro CLI is installed via a piped-to-bash command (curl -Ls ... | bash), which executes a remote script directly in the user's shell environment.\n- [COMMAND_EXECUTION]: The skill utilizes several command-line tools for application building and test execution, includingbrew,npm,npx detox,maestro, andpatrol.\n- [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow where the agent ingests and executes content from user-provided test files (YAML, TypeScript, and Dart), which could serve as a vector for indirect instructions.\n - Ingestion points: Test definition files such as
e2e/login.yaml,e2e/login.test.ts, andintegration_test/login_test.dartdefined inSKILL.md.\n - Boundary markers: No specific delimiters or instructions are used to prevent the agent from following natural language commands potentially embedded in these test files.\n
- Capability inventory: The skill uses
maestro test,npx detox test, andpatrol testto execute the logic defined within the ingested files.\n - Sanitization: The skill does not implement sanitization or validation of the test file contents prior to execution.
Recommendations
- HIGH: Downloads and executes remote code from: https://get.maestro.mobile.dev - DO NOT USE without thorough review
Audit Metadata