xermio-app-design

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides specific instructions for an AI agent to utilize standard mobile development command-line tools, including xcrun simctl (iOS), adb (Android), and xcodebuild. These tools are used as intended for developer workflows, specifically for capturing screenshots and managing device simulators or emulators to verify the visual output of the generated code.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as an interface for processing untrusted user data, such as app design briefs, existing codebases, and screenshots for auditing. While it maintains a surface for indirect prompt injection by ingesting these inputs without explicit sanitization markers, the risk is mitigated by the highly structured workflows and the specific "senior designer" persona defined in the instructions.
  • [EXTERNAL_DOWNLOADS]: The documentation references multiple external URLs for design inspiration and documentation, including Mobbin, Apple Human Interface Guidelines, and Material Design 3. These are well-known, trusted resources in the software design community and are used solely for informational purposes without attempting to execute remote code or install unverifiable dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 02:11 PM