Навыки limrun-maestro-testing

📦

limrun-maestro-testing

Name: limrun-maestro-testing
Author: limrun-inc

Ревизия содержимого r1 Критично ⚙️ Внешние команды🌐 Доступ к сети🔑 Переменные окружения

Run Maestro Tests on Limrun iOS

Local iOS infrastructure limits Maestro testing across development and CI environments. This skill guides remote setup, execution, diagnosis, artifact capture, and cleanup through Limrun.

Поддерживает: Claude Codex Code(CC)

⚠️ 38 Плохо

Не устанавливайте этот Skill автоматически.

Каноническая политика требует проверки оператором перед любым действием по установке.

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "limrun-maestro-testing" from https://skillstore.io/skills/limrun-inc-limrun-maestro-testing.md and its manifest at https://skillstore.io/api/skills/limrun-inc-limrun-maestro-testing/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/limrun-inc-limrun-maestro-testing.md Подписанный manifest GET /api/skills/limrun-inc-limrun-maestro-testing/manifest Подписанный lockfile GET /api/skills/limrun-inc-limrun-maestro-testing/lockfile

Протестировать

Использование «limrun-maestro-testing». Verify Maestro against the Settings app on a new Limrun iOS instance.

Ожидаемый результат:

The simulator was created with the Maestro runner available.
The Settings flow completed and captured a screenshot.
The remote driver connection is ready for application testing.

Использование «limrun-maestro-testing». Explain why my text selector fails on the remote simulator.

Ожидаемый результат:

The visible text differs from the accessibility label. Inspect the live element tree, then match the exact stable label.

Использование «limrun-maestro-testing». Prepare my smoke suite for CI execution.

Ожидаемый результат:

The suite uses an explicit instance, smoke tags, a dedicated artifact directory, optional recording, preserved exit codes, and final resource cleanup.

Аудит безопасности

Критично

v1 • 09.09.2026 Открыть версионный отчет

Most static alerts are Markdown formatting, protocol examples, instance identifiers, or defensive credential guidance. The curl-to-shell installer is a confirmed critical supply-chain risk. The workflow also transfers application builds and test activity to Limrun cloud infrastructure.

Просканировано файлов

154

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (2)

Критично

SKILL.md:20

Pipe to shell pattern

- Maestro CLI on PATH: `curl -fsSL https://get.maestro.mobile.dev | bash`.

Line 20 downloads remote content and executes it immediately with Bash. A compromised endpoint or response could run arbitrary code without integrity verification.

Средний

SKILL.md:9-13 SKILL.md:90-94

Remote Cloud Execution and App Transfer

The workflow runs tests on Limrun infrastructure and installs application packages on remote simulators. Proprietary builds and test interactions therefore leave the local environment.

The document explicitly describes a remote Limrun simulator and instructs users to install application packages there. The third-party data boundary is direct and unambiguous.

Пункты проверки возможностей (1)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Низкий

SKILL.md:20

Hardcoded URL

- Maestro CLI on PATH: `curl -fsSL https://get.maestro.mobile.dev | bash`.

Line 20 contacts a fixed external installer endpoint and passes its response to Bash. This creates a real network and software supply-chain risk.

Факторы риска

⚙️ Внешние команды (50)

🌐 Доступ к сети (3)

SKILL.md:20 SKILL.md:120 SKILL.md:121

🔑 Переменные окружения (1)

SKILL.md:18

Обнаруженные паттерны

Pipe to shell pattern

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/limrun-inc-limrun-maestro-testing/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/limrun-inc-limrun-maestro-testing/security.svg)](https://skillstore.io/skills/limrun-inc-limrun-maestro-testing?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/limrun-inc-limrun-maestro-testing?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/limrun-inc-limrun-maestro-testing/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/limrun-inc-limrun-maestro-testing.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

limrun-inc. (2026). limrun-maestro-testing security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/limrun-inc-limrun-maestro-testing/audits/1

Цитата BibTeX

@techreport{limrun-inc-limrun-inc-limrun-maestro-testing-2026,
  author = {limrun-inc},
  title = {limrun-maestro-testing security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/limrun-inc-limrun-maestro-testing/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "limrun-maestro-testing security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "limrun-inc"
date-released: "2026-09-09"
url: "https://skillstore.io/skills/limrun-inc-limrun-maestro-testing/audits/1"
identifiers:
  - type: other
    value: "skillstore:limrun-inc-limrun-maestro-testing:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Низкий

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Validate mobile user journeys

Run repeatable Maestro flows on remote iOS simulators and inspect failures with screenshots and accessibility data.

Debug Expo interfaces

Open Expo projects on cloud simulators and refine selectors for stable iOS automation.

Move tests into CI

Target explicit simulator instances, preserve reports, record runs, and clean up resources after execution.

Попробуйте эти промпты

Verify a basic setup

Verify my Limrun Maestro setup using the iOS Settings app, then explain each validation result.

Run a project flow

Run the Maestro flow at [path] on iOS instance [id], preserve artifacts, and summarize failures.

Debug a selector

Diagnose this failing Maestro selector using the live element tree and recommend a stable accessibility-based replacement: [failure].

Migrate a CI suite

Convert my Maestro suite at [path] for Limrun CI, including instance targeting, tagging, output directories, recording, and cleanup.

Лучшие практики

Use explicit iOS instance identifiers in scripts and CI jobs.
Anchor assertions on stable accessibility identifiers or exact labels.
Use approved test builds, synthetic data, and scoped credentials on remote simulators.

Избегать

Do not pipe remote installers directly into a shell without integrity verification.
Do not pass driver or platform flags that Limrun manages automatically.
Do not depend on fixed delays or unsupported local simulator file paths.

Часто задаваемые вопросы

Does this skill support Android testing?

No. It supports Maestro flows on Limrun iOS simulators only.

Which Maestro versions are supported?

The documented Limrun runner supports Maestro 2.5 through 2.7.

Can I use this in CI?

Yes. Specify the simulator instance, preserve output artifacts, and use Maestro exit codes for job status.

Does it support Expo applications?

Yes. It covers Expo Go and development client flows using project or client links.

Where are screenshots saved?

Maestro saves screenshots in the working directory or the selected test output directory.

How should I handle secrets?

Use scoped Limrun credentials and synthetic test accounts. Never place production secrets in flows, logs, prompts, or artifacts.

Сведения для разработчиков

Автор

limrun-inc

Лицензия

MIT

Ревизия Skillstore

Примечание о версии

Автор не указал версию.

Репозиторий

https://github.com/limrun-inc/skills/tree/6f7e4c48f6b0c36a6c75b62dac9082df3b844e79/skills/limrun-maestro-testing

Ссылка

367c7bb3962eb92a1b87fc08b2947aeda00cd51d

Актуальность поддержки

09.09.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md