asc-shots-pipeline
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Automates iOS build and simulation workflows through Xcode command-line utilities (xcodebuild, simctl) and interacts with the asc CLI for screenshot management. Use of parallel shell execution is observed in multi-locale scripts via background processes and xargs.
- [EXTERNAL_DOWNLOADS]: Installs the koubou package from a public registry, pinned to version 0.18.0, to perform image framing operations.
- [INDIRECT_PROMPT_INJECTION]: Ingests local configuration from .asc/shots.settings.json and .asc/screenshots.json to define the execution flow.
- Ingestion points: SKILL.md (Steps 1 and 3).
- Boundary markers: Absent.
- Capability inventory: xcodebuild, simctl, asc, and pip (Steps 2-8).
- Sanitization: Absent; the skill expects structured JSON from local storage.
Audit Metadata