dogfood
Test Mobile Apps with Runtime Evidence
Mobile app bugs and usability problems can remain hidden during routine checks. This skill guides exploratory testing with agent-device and captures runtime evidence for issues.
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
Review the Skillstore skill "dogfood" from https://skillstore.io/skills/callstack-dogfood.md and its manifest at https://skillstore.io/api/skills/callstack-dogfood/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「dogfood」。 Illustrative request: explore onboarding in a mobile test app.
預期結果:
Illustrative finding: the Continue button becomes hidden when the keyboard opens. Evidence: a screenshot and the interaction sequence that reproduced the issue.
正在使用「dogfood」。 Illustrative request: start exploratory QA when agent-device is unavailable.
預期結果:
Testing paused because a trusted agent-device binary is unavailable. Provide a trusted installation or approve an exact-version npm command before testing.
安全審計
安全All eight static findings are false positives: Markdown formatting, authorized testing screenshots, and an app testing description were misclassified. No evidence found of screenshot uploads, system reconnaissance, or prompt injection. The workflow requires a trusted CLI and approval for exact-version npm fallback commands.
風險因素
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/callstack-dogfood/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/callstack-dogfood?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/callstack-dogfood?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/callstack-dogfood/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/callstack-dogfood.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
callstack. (2026). dogfood security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/callstack-dogfood/audits/1BibTeX 引用
@techreport{callstack-callstack-dogfood-2026,
author = {callstack},
title = {dogfood security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/callstack-dogfood/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "dogfood security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "callstack"
date-released: "2026-09-30"
url: "https://skillstore.io/skills/callstack-dogfood/audits/1"
identifiers:
- type: other
value: "skillstore:callstack-dogfood:audit:1"
description: "Skillstore immutable audit report identifier"
比較變體
2 個可安裝變體每位作者的技能都保留為獨立的可安裝項目。推薦變體依 Skillstore 證據排序。
為何此變體排名第一
Skillstore 評分
評分依據 證據置信度: 中你可以打造什麼
Explore Release Candidate Flows
Test key mobile app flows and collect runtime evidence for reproducible issues before release.
Investigate Reported App Behavior
Explore a reported problem in the target app and capture evidence when the behavior occurs.
Review Mobile Usability
Explore onboarding and navigation to identify usability problems visible during real interactions.
試試這些提示
Explore [app name] on [platform] for visible bugs. Capture runtime evidence for each issue.
Test [flow name] in [app name] on [platform]. Record observed problems and capture evidence without inspecting source code.
Explore [flow name] in [app name] on iOS and Android. Report observed differences with evidence from each available platform.
Test [app name] on [platform] across [approved flows] using test data. Follow current CLI reporting guidance and capture evidence for each issue.
最佳實務
- Identify the target app, platform, and authorized test scope before exploration.
- Use a trusted CLI installation and consult its current dogfood help.
- Use test accounts and review captured evidence for sensitive information before sharing.
避免
- Do not install or execute the latest npm package autonomously.
- Do not report source code assumptions as observed runtime defects.
- Do not explore unrelated apps or capture personal data outside the approved scope.