The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install simslim, a third-party optimization tool, from a non-trusted repository at github.com/MobAI-App/simslim. The tool is retrieved via go install or direct tarball download and executed locally to modify simulator behavior, which presents a supply chain risk.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, untrusted mobile applications, which can lead to indirect prompt injection if the app contains malicious content in its accessibility labels.
Ingestion points: The agent reads the accessibility tree (labels and frames) using idb ui describe-all and captures visual state via xcrun simctl io screenshot in SKILL.md.
Boundary markers: None identified; the skill does not instruct the agent to distinguish between its own instructions and content found within the app interface.
Capability inventory: The skill allows execution of idb and simctl via Bash, and file access via Read.
Sanitization: There are no instructions for sanitizing or filtering text content extracted from the UI accessibility tree.
[COMMAND_EXECUTION]: The skill makes extensive use of the Bash tool to drive simulator automation, including managing lifecycle, capturing media, and installing builds. It also instructs the agent to use pip3 for package management and gh for querying external assets.

interactive-simulator-ux-audit