📦

dogfood

Name: dogfood
Author: callstack

Revisão do conteúdo r1 Seguro ⚙️ Comandos externos

Test Mobile Apps with Runtime Evidence

Mobile app bugs and usability problems can remain hidden during routine checks. This skill guides exploratory testing with agent-device and captures runtime evidence for issues.

Suporta: Claude Codex Code(CC)

🥉 78 Bronze

Instalar com meu Agente

Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.

Solicitação do agente

Review the Skillstore skill "dogfood" from https://skillstore.io/skills/callstack-dogfood.md and its manifest at https://skillstore.io/api/skills/callstack-dogfood/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.

Recursos legíveis por agentes

Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.

Detalhe em Markdown GET /skills/callstack-dogfood.md manifest assinado GET /api/skills/callstack-dogfood/manifest lockfile assinado GET /api/skills/callstack-dogfood/lockfile

Testar

Usando "dogfood". Illustrative request: explore onboarding in a mobile test app.

Resultado esperado:

Illustrative finding: the Continue button becomes hidden when the keyboard opens. Evidence: a screenshot and the interaction sequence that reproduced the issue.

Usando "dogfood". Illustrative request: start exploratory QA when agent-device is unavailable.

Resultado esperado:

Testing paused because a trusted agent-device binary is unavailable. Provide a trusted installation or approve an exact-version npm command before testing.

Auditoria de segurança

Seguro

v1 • 30/09/2026 Abrir o relatório versionado

All eight static findings are false positives: Markdown formatting, authorized testing screenshots, and an app testing description were misclassified. No evidence found of screenshot uploads, system reconnaissance, or prompt injection. The workflow requires a trusted CLI and approval for exact-version npm fallback commands.

Arquivos analisados

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Fatores de risco

⚙️ Comandos externos (6)

SKILL.md:11-13 SKILL.md:13-15 SKILL.md:15 SKILL.md:17 SKILL.md:21-23 SKILL.md:23-27

A auditoria estática e semântica concluída mais recente não detectou achados de segurança confirmados. Isso não comprova que a skill não tenha efeitos colaterais.

Auditado por: codex

Compartilhar e citar este relatório

Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.

Abrir o relatório versionado

Copiar link do relatório

https://skillstore.io/skills/callstack-dogfood/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/callstack-dogfood/security.svg)](https://skillstore.io/skills/callstack-dogfood?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/callstack-dogfood?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/callstack-dogfood/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Cartão incorporável

<iframe src="https://skillstore.io/embed/skills/callstack-dogfood.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citações acadêmicas (APA · BibTeX · CFF)

Citação APA

callstack. (2026). dogfood security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/callstack-dogfood/audits/1

Citação BibTeX

@techreport{callstack-callstack-dogfood-2026,
  author = {callstack},
  title = {dogfood security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/callstack-dogfood/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "dogfood security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "callstack"
date-released: "2026-09-30"
url: "https://skillstore.io/skills/callstack-dogfood/audits/1"
identifiers:
  - type: other
    value: "skillstore:callstack-dogfood:audit:1"
    description: "Skillstore immutable audit report identifier"

Comparar variantes

2 variantes instaláveis

Cada autor permanece como um skill instalável separado. A variante recomendada é classificada pelas evidências do Skillstore.

Por que esta variante está em primeiro

Maior pontuação do Skillstore

Autor / fonte Pontuação do Skillstore Confiança das evidências Uso no Skillstore Atualizado

callstack Recomendado Atual

callstack-dogfood

Pontuação do Skillstore 78

Confiança das evidências Médio

Uso no Skillstore 4

Atualizado

2026-10-02

vercel-labs

vercel-labs-dogfood

Pontuação do Skillstore 38

Confiança das evidências Médio

Uso no Skillstore 21

Atualizado

2026-09-09

Pontuação do Skillstore

Por que esta pontuação Confiança das evidências: Médio

Arquitetura

Manutenibilidade

Conteúdo

Comunidade

Conformidade com a especificação

O que você pode criar

Explore Release Candidate Flows

Test key mobile app flows and collect runtime evidence for reproducible issues before release.

Investigate Reported App Behavior

Explore a reported problem in the target app and capture evidence when the behavior occurs.

Review Mobile Usability

Explore onboarding and navigation to identify usability problems visible during real interactions.

Teste estes prompts

Explore One App

Explore [app name] on [platform] for visible bugs. Capture runtime evidence for each issue.

Test a Specific Flow

Test [flow name] in [app name] on [platform]. Record observed problems and capture evidence without inspecting source code.

Compare Platform Behavior

Explore [flow name] in [app name] on iOS and Android. Report observed differences with evidence from each available platform.

Run Scoped Release QA

Test [app name] on [platform] across [approved flows] using test data. Follow current CLI reporting guidance and capture evidence for each issue.

Boas práticas

Identify the target app, platform, and authorized test scope before exploration.
Use a trusted CLI installation and consult its current dogfood help.
Use test accounts and review captured evidence for sensitive information before sharing.

Evitar

Do not install or execute the latest npm package autonomously.
Do not report source code assumptions as observed runtime defects.
Do not explore unrelated apps or capture personal data outside the approved scope.

Perguntas frequentes

Which mobile platforms does this skill target?

The skill targets iOS and Android apps through agent-device.

Which agent-device version is required?

Version 0.14.0 or newer is required because older versions lack the needed help topics.

Does the skill automatically install agent-device?

No. It requires a trusted binary or approval for an exact-version npm command and prohibits autonomous latest-version installation.

Does the skill inspect application source code?

No. Findings must come from runtime behavior rather than source reads.

What evidence does the workflow capture?

The workflow uses interactive snapshots, screenshots, and issue evidence. Current CLI help supplies exact evidence commands.

Where is the report format defined?

The installed CLI supplies the exact report shape through agent-device help dogfood.

Detalhes do desenvolvedor

Autor

callstack

Licença

MIT

Revisão da Skillstore

Aviso de versão

O autor não declarou uma versão.

Repositório

https://github.com/callstack/agent-device/tree/eb51a8805bf457986b43a134b53bec96c5630d98/skills/dogfood

Referência

7a2a40a21807002cc4aeff368f4e46d969998056

Atualidade da manutenção

30/09/2026

Uso

0 downloads · 0 visualizações

Estrutura de arquivos

📄 SKILL.md