The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The ui-automation.md file recommends installing an external dependency (axe) using a third-party Homebrew tap (cameroncooke/axe). This source is not verified as a trusted organization or well-known service, posing a risk of supply chain compromise.
[COMMAND_EXECUTION]: The debugging.md file describes the debug_lldb_command tool, which enables the execution of arbitrary LLDB commands. While necessary for deep debugging, this capability allows for significant control over the target application's execution flow and memory, which could be exploited if provided with malicious input.
[PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes untrusted data from application logs (start_device_log_cap in device-tools.md) and UI hierarchies (snapshot_ui in ui-automation.md). 1. Ingestion points: references/device-tools.md and references/ui-automation.md. 2. Boundary markers: Absent. 3. Capability inventory: Includes debug_lldb_command, tap, swipe, and application installation/launch. 4. Sanitization: None described for the captured logs or UI element labels.

ios