emulator-testing
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill mentions the use of sudo for Xcode license acceptance.
- Evidence: In Section 4, the skill instructs the user to manually run
sudo xcodebuild -license acceptonce to handle the interactive prompt before allowing the agent to automate the environment. - [COMMAND_EXECUTION]: The skill uses various system and mobile development CLI tools to control emulator lifecycles and verify test results.
- Evidence: Instructions include running
adb shell,xcrun simctl,pkill,sha256sum, andfileto interact with emulators and validate file artifacts. - [INDIRECT_PROMPT_INJECTION]: The skill involves ingesting external data from emulators that could theoretically contain malicious instructions.
- Ingestion points: The agent is instructed to read
adb logcatoutput and UI hierarchies viauiautomator dump(SKILL.md). - Boundary markers: The skill does not provide specific delimiters or instructions to ignore potential instructions embedded within the logs or UI data.
- Capability inventory: The skill has broad capabilities to execute shell commands via
adb shell,simctl, and local shell utilities likepkillandfile(SKILL.md). - Sanitization: No sanitization or validation logic is defined for the content retrieved from logcat or UI dumps.
Audit Metadata