emulator-testing

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill mentions the use of sudo for Xcode license acceptance.
  • Evidence: In Section 4, the skill instructs the user to manually run sudo xcodebuild -license accept once to handle the interactive prompt before allowing the agent to automate the environment.
  • [COMMAND_EXECUTION]: The skill uses various system and mobile development CLI tools to control emulator lifecycles and verify test results.
  • Evidence: Instructions include running adb shell, xcrun simctl, pkill, sha256sum, and file to interact with emulators and validate file artifacts.
  • [INDIRECT_PROMPT_INJECTION]: The skill involves ingesting external data from emulators that could theoretically contain malicious instructions.
  • Ingestion points: The agent is instructed to read adb logcat output and UI hierarchies via uiautomator dump (SKILL.md).
  • Boundary markers: The skill does not provide specific delimiters or instructions to ignore potential instructions embedded within the logs or UI data.
  • Capability inventory: The skill has broad capabilities to execute shell commands via adb shell, simctl, and local shell utilities like pkill and file (SKILL.md).
  • Sanitization: No sanitization or validation logic is defined for the content retrieved from logcat or UI dumps.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 09:33 AM