ios-device-automation

Automates iOS devices using vision-driven commands, enabling interaction through natural language without needing DOM access.

Install this skill

78/100

Security score

The ios-device-automation skill was audited on May 12, 2026 and we found 14 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 34

Access to .env file

SourceSKILL.md

34	Midscene requires models with strong visual grounding capabilities. The following environment variables must be configured — either as system environment variables or in a `.env` file in the current w

medium line 217

Access to .env file

SourceSKILL.md

217	- Check `.env` file contains `MIDSCENE_MODEL_API_KEY=<your-key>`.

low line 12

External URL reference

SourceSKILL.md

12	Powered by Midscene.js (https://midscenejs.com)

low line 39

External URL reference

SourceSKILL.md

39	MIDSCENE_MODEL_BASE_URL="https://..."

low line 48

External URL reference

SourceSKILL.md

48	MIDSCENE_MODEL_BASE_URL="https://generativelanguage.googleapis.com/v1beta/openai/"

low line 57

External URL reference

SourceSKILL.md

57	MIDSCENE_MODEL_BASE_URL="https://dashscope.aliyuncs.com/compatible-mode/v1"

low line 63

External URL reference

SourceSKILL.md

63	# MIDSCENE_MODEL_BASE_URL="https://openrouter.ai/api/v1"

low line 71

External URL reference

SourceSKILL.md

71	MIDSCENE_MODEL_BASE_URL="https://ark.cn-beijing.volces.com/api/v3"

low line 77

External URL reference

SourceSKILL.md

77	If the model is not configured, ask the user to set it up. See [Model Configuration](https://midscenejs.com/model-common-config) for supported providers.

low line 89

External URL reference

SourceSKILL.md

89	Use the built-in launch capability when you want to start from a known app or route before the rest of the task. Give it the most specific target you have, such as a bundle ID, web URL, deep link, or

low line 99

External URL reference

SourceSKILL.md

99	This does not run an ADB command. On iOS, the underlying operation is an HTTP request to WebDriverAgent, typically `GET http://<wdaHost>:<wdaPort>/session/<sessionId>/wda/screen`.

low line 141

External URL reference

SourceSKILL.md