mobile-dev-server-sandbox
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various orchestration commands through a local Makefile (e.g.,
make mobile-sandbox,make dev-server-sandbox). It also provides instructions for binding development servers to all network interfaces (0.0.0.0), which is a standard procedure for mobile testing on real devices but makes local services accessible to the network. - [PROMPT_INJECTION]: The workflow involves interacting with web content using Chrome MCP tools, which creates a surface for indirect prompt injection. Ingestion points: Data is ingested via
chrome_navigate_pageandchrome_take_snapshot(SKILL.md). Boundary markers: There are no delimiters or instructions to separate ingested web content from agent logic. Capability inventory: The skill can execute shell commands and perform browser-based automation. Sanitization: No sanitization of the browser-retrieved content is performed before processing.
Audit Metadata