npm JavaScript analyzed 0.21.0 deep scan unknown unconfirmed MCP

callstack/agent-device

v0.21.0

Mobile app automation and verification for AI coding agents. CLI, MCP server, and typed Node.js API for iOS, Android, HarmonyOS, TV, web, macOS, and Linux.

maintainer: callstack
licence: MIT
first seen: 2026-06-03
last seen: 2026-09-10
releases · 30d: 7
short id

Drift inferred · capture-to-capture

HIGH 2026-09-08 code analysis flagged dynamic code execution in callstack/agent-device
HIGH 2026-08-18 code analysis flagged dynamic code execution in callstack/agent-device
HIGH 2026-08-17 code analysis flagged dynamic code execution in callstack/agent-device
HIGH 2026-08-14 code analysis flagged dynamic code execution in callstack/agent-device
HIGH 2026-08-12 code analysis flagged dynamic code execution in callstack/agent-device
HIGH 2026-08-11 code analysis flagged dynamic code execution in callstack/agent-device
HIGH 2026-08-10 code analysis flagged dynamic code execution in callstack/agent-device
HIGH 2026-08-10 code analysis flagged dynamic code execution in callstack/agent-device
HIGH 2026-08-08 code analysis flagged dynamic code execution ×2 in callstack/agent-device
HIGH 2026-08-07 code analysis flagged dynamic code execution ×2 in callstack/agent-device
HIGH 2026-08-03 code analysis flagged dynamic code execution ×2 in callstack/agent-device
HIGH 2026-08-03 code analysis flagged dynamic code execution ×2 in callstack/agent-device
HIGH 2026-07-30 code analysis flagged dynamic code execution ×2 in callstack/agent-device
HIGH 2026-07-29 code analysis flagged dynamic code execution ×2 in callstack/agent-device
HIGH 2026-07-10 code analysis flagged dynamic code execution in callstack/agent-device

capabilities 0 tools

transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.21.0 · analyzer v33 · 1d ago

skills & prompt files 5

danger signals3

dynamic code execution new Function() callstack-agent-device-6486788/packages/platform-web/src/agent-browser-provider.test.ts :834 const run = new Function(
dynamic code execution vm exec callstack-agent-device-6486788/src/daemon/adapters/maestro/run-script-execution.ts :30 vm.runInNewContext(script, buildScriptGlobals(env, output, publicNetworkOnly), {
suspicious endpoint 169.254.169.254 (cloud metadata) callstack-agent-device-6486788/src/daemon/adapters/maestro/__tests__/run-script-http.test.ts :170 url: 'http://169.254.169.254/latest/meta-data',

code evidence v0.21.0 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 3747

filesystem 331

fs callstack-agent-device-6486788/bin/agent-device.mjs :2 import { existsSync } from 'node:fs';
fs (weak) callstack-agent-device-6486788/examples/test-app/security/image-size-security.test.mjs :3 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/audio-probe-runtime.test.ts :2 import { promises as fs } from 'node:fs';
fs callstack-agent-device-6486788/packages/capture-kit/src/audio-probe-runtime.ts :1 import fs from 'node:fs/promises';
fs callstack-agent-device-6486788/packages/capture-kit/src/audio-probe-status.ts :1 import fs from 'node:fs/promises';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/durable-capture/adoption.test.ts :1 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/durable-capture/store.test.ts :1 import fs from 'node:fs';
fs callstack-agent-device-6486788/packages/capture-kit/src/durable-capture/store.ts :1 import fs from 'node:fs';
fs callstack-agent-device-6486788/packages/capture-kit/src/internal-entry.ts :1 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/ios-snapshot-engine/conformance-fixture.ts :1 import fs from 'node:fs';
fs callstack-agent-device-6486788/packages/capture-kit/src/ios-snapshot-engine/conformance-harness.ts :2 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/ios-snapshot-engine/conformance.test.ts :1 import fs from 'node:fs';

show 28 more

fs callstack-agent-device-6486788/packages/capture-kit/src/ios-snapshot-engine/replay.ts :2 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/ios-snapshot-planning.test.ts :2 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/png-crop.test.ts :3 import fs from 'node:fs';
fs callstack-agent-device-6486788/packages/capture-kit/src/png-crop.ts :1 import { promises as fs } from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/png-resize.test.ts :3 import fs from 'node:fs';
fs callstack-agent-device-6486788/packages/capture-kit/src/png-resize.ts :1 import { promises as fs } from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/png-size.test.ts :3 import fs from 'node:fs';
fs callstack-agent-device-6486788/packages/capture-kit/src/png-size.ts :1 import { promises as fs } from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/recording/__tests__/overlay.test.ts :2 import fs from 'node:fs';
fs callstack-agent-device-6486788/packages/capture-kit/src/recording/overlay.ts :1 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/recording/swift-cache.test.ts :2 import fs from 'node:fs';
fs callstack-agent-device-6486788/packages/capture-kit/src/recording/swift-cache.ts :2 import fs from 'node:fs';
fs callstack-agent-device-6486788/packages/capture-kit/src/recording/telemetry.ts :1 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/recording/video-webm.test.ts :1 import fs from 'node:fs';
fs callstack-agent-device-6486788/packages/capture-kit/src/recording/video-webm.ts :1 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/recording/video.test.ts :1 import fs from 'node:fs';
fs callstack-agent-device-6486788/packages/capture-kit/src/recording/video.ts :1 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/screenshot-overlay.test.ts :3 import fs from 'node:fs';
fs callstack-agent-device-6486788/packages/capture-kit/src/screenshot-overlay.ts :1 import { promises as fs } from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/snapshot-desktop-projection.test.ts :2 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/snapshot-quality-backend-capabilities.test.ts :1 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/snapshot-rect-projection.test.ts :3 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/capture-kit/src/tmp-dir.fixtures.ts :1 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/contracts/src/scroll-gesture.test.ts :3 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/contracts/src/snapshot-scope.test.ts :3 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/contracts/src/snapshot-tap-point-policy.test.ts :3 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/contracts/src/snapshot-viewport-root.test.ts :1 import fs from 'node:fs';
fs (weak) callstack-agent-device-6486788/packages/host-kit/src/code-signature-cache.test.ts :2 import fs from 'node:fs';

291 more not shown — this panel samples each group; the count above is the real total.

shell / exec 75

shell (weak) callstack-agent-device-6486788/examples/test-app/security/image-size-security.test.mjs :2 import { spawnSync } from 'node:child_process';
shell callstack-agent-device-6486788/packages/capture-kit/src/ios-snapshot-engine/conformance-harness.ts :1 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/packages/host-kit/src/internal/exec-windows-hide.test.ts :46 function makeMockChild(): ReturnType<typeof import('node:child_process').spawn> {
shell callstack-agent-device-6486788/packages/host-kit/src/internal/exec.ts :5 import { spawn, spawnSync, type ChildProcess, type StdioOptions } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/packages/maestro/test/conformance/differential/engine-process.ts :1 import { spawnSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/packages/platform-android/src/__tests__/fill-verification.test.ts :161 return await exec(args, execOptions);
shell callstack-agent-device-6486788/packages/platform-android/src/adb-provider-scope.ts :77 await exec(['pull', remotePath, localPath], options),
shell callstack-agent-device-6486788/packages/platform-android/src/adb-transfer.ts :42 async () => await exec(['pull', remotePath, localPath], transferOptions),
shell (weak) callstack-agent-device-6486788/packages/platform-apple/src/runner/__tests__/runner-xctestrun.test.ts :19 const actual = await vi.importActual<typeof import('node:child_process')>('node:child_process');
shell callstack-agent-device-6486788/packages/platform-apple/src/runner/host.ts :1 import type { ChildProcess } from 'node:child_process';
shell callstack-agent-device-6486788/packages/platform-web/src/agent-browser-install.ts :63 * broken: npm ships as `npm.cmd` there, which `child_process.spawn` refuses
shell (weak) callstack-agent-device-6486788/packages/platform-web/src/agent-browser-tool.test.ts :38 // The `node_modules/.bin` shim is a `.cmd` on Windows, which `child_process.spawn`

show 28 more

shell callstack-agent-device-6486788/packages/platform-web/src/agent-browser-tool.ts :55 * no caller can reintroduce the `.bin` shim that Windows cannot spawn (#2022).
shell (weak) callstack-agent-device-6486788/scripts/__tests__/committed-source-tree.ts :4 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/__tests__/diagnose-1874-iteration.test.ts :1 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/__tests__/eager-closure-budgets.test.ts :2 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/__tests__/help-conformance-bench.test.ts :2 import { execFile } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/__tests__/size-report-post-comment.test.ts :2 import { execFile } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/check-package.ts :21 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/coverage-changed/run.test.ts :2 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/depgraph/affected.test.ts :2 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/depgraph/build.ts :14 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/depgraph/model.test.ts :2 import { execFileSync, spawnSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/di-seams/check.ts :7 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/fuzz/execute.ts :16 import { fork, type ChildProcess } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/fuzz/harness.test.ts :8 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/gate/audit-coverage.test.ts :3 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/gate/audit.test.ts :3 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/gate/model.test.ts :8 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/gate/routing.test.ts :5 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/gate/workflows.test.ts :4 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/help-conformance-bench.mjs :2 import { execFile } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/help-conformance-plan-validator.mjs :1 import { execFile } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/ios-ax-bridge-spike/guest-connection.ts :5 import { spawn, spawnSync, type ChildProcess } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/ios-ax-bridge-spike/guest-process-metrics.ts :1 import { spawnSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/ios-ax-bridge-spike/targeted-evidence.ts :1 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/ios-snapshot-benchmark/cli-process.ts :1 import { execFile, spawnSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/ios-snapshot-benchmark/deep-control.ts :1 import { spawnSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/ios-snapshot-benchmark/host.ts :1 import { execFileSync } from 'node:child_process';
shell (weak) callstack-agent-device-6486788/scripts/ios-snapshot-benchmark/lifecycle.ts :1 import { spawnSync } from 'node:child_process';

35 more not shown — this panel samples each group; the count above is the real total.

network 97

net (weak) callstack-agent-device-6486788/.github/actions/setup-fixture-app/trusted-artifact.mjs :74 const response = await fetch(new URL(path, resolveApiBaseUrl()), {
net (weak) callstack-agent-device-6486788/packages/host-kit/src/internal/transport.test.ts :3 import http from 'node:http';
net callstack-agent-device-6486788/packages/host-kit/src/internal/transport.ts :2 import type { IncomingMessage } from 'node:http';
net (weak) callstack-agent-device-6486788/packages/platform-android/src/__tests__/snapshot-helper-session.fixtures.ts :12 import net from 'node:net';
net (weak) callstack-agent-device-6486788/packages/platform-android/src/__tests__/touch-helper-session.test.ts :10 import net from 'node:net';
net callstack-agent-device-6486788/packages/platform-android/src/snapshot-helper-session-protocol.ts :1 import net from 'node:net';
net (weak) callstack-agent-device-6486788/packages/platform-apple/src/runner/__tests__/fake-runner-server.ts :1 import http from 'node:http';
net (weak) callstack-agent-device-6486788/packages/platform-apple/src/runner/__tests__/runner-transport.test.ts :98 // fetchWithTimeout does not wrap fetch() failures into an AppError, so this test's
net (weak) callstack-agent-device-6486788/packages/platform-apple/src/runner/__tests__/runner-usbmux-boundary-faults.test.ts :2 import type { Server } from 'node:net';
net (weak) callstack-agent-device-6486788/packages/platform-apple/src/runner/__tests__/runner-usbmux-fixtures.ts :2 import net, { type Server, type Socket } from 'node:net';
net (weak) callstack-agent-device-6486788/packages/platform-apple/src/runner/__tests__/runner-usbmux.test.ts :2 import type { Server } from 'node:net';
net callstack-agent-device-6486788/packages/platform-apple/src/runner/runner-io.ts :3 import net from 'node:net';

show 28 more

net callstack-agent-device-6486788/packages/platform-apple/src/runner/runner-transport.ts :90 return await fetch(url, { ...init, signal });
net callstack-agent-device-6486788/packages/platform-apple/src/runner/runner-usbmux-protocol.ts :2 import net, { type Socket } from 'node:net';
net callstack-agent-device-6486788/packages/platform-apple/src/runner/runner-usbmux.ts :2 import http, { type IncomingMessage } from 'node:http';
net callstack-agent-device-6486788/packages/platform-apple/src/snapshot-source/host.ts :2 import net from 'node:net';
net callstack-agent-device-6486788/packages/provider-webdriver/src/browserstack-connection-verification.ts :109 const response = await fetch(endpoint, {
net callstack-agent-device-6486788/packages/provider-webdriver/src/browserstack.ts :191 const response = await fetch(options.endpoint ?? BROWSERSTACK_APP_UPLOAD_ENDPOINT, {
net callstack-agent-device-6486788/packages/provider-webdriver/src/webdriver-transport.ts :159 const response = await fetch(new URL(trimLeadingSlash(path), this.endpoint), {
net callstack-agent-device-6486788/packages/provision-kit/src/install-source-network-transport.ts :1 import net from 'node:net';
net callstack-agent-device-6486788/packages/provision-kit/src/install-source-network.ts :2 import net from 'node:net';
net (weak) callstack-agent-device-6486788/scripts/__tests__/size-report-post-comment.test.ts :14 // Each entry answers one fetch call, in order. `net` rejects the fetch (a
net (weak) callstack-agent-device-6486788/scripts/ios-ax-bridge-spike/guest-connection.ts :2 import net from 'node:net';
net (weak) callstack-agent-device-6486788/scripts/ios-snapshot-benchmark/proxy-conditioner.test.ts :2 import http from 'node:http';
net (weak) callstack-agent-device-6486788/scripts/ios-snapshot-benchmark/proxy-conditioner.ts :1 import http, { type IncomingMessage, type ServerResponse } from 'node:http';
net (weak) callstack-agent-device-6486788/scripts/layering/platform-package-source-policy.test.ts :27 "export async function request() { return await fetch('https://example.test'); }",
net (weak) callstack-agent-device-6486788/scripts/size-report.mjs :401 return await fetch(url, init);
net (weak) callstack-agent-device-6486788/src/__tests__/cli-config-trust.test.ts :4 import http from 'node:http';
net (weak) callstack-agent-device-6486788/src/__tests__/cli-startup-import-closure.test.ts :30 { form: 'default value import', code: `import http from 'node:http';`, eager: true },
net (weak) callstack-agent-device-6486788/src/__tests__/client-companion-tunnel-worker.test.ts :5 import http from 'node:http';
net (weak) callstack-agent-device-6486788/src/__tests__/client-metro.test.ts :6 import { createServer } from 'node:http';
net (weak) callstack-agent-device-6486788/src/__tests__/daemon-client-progress.test.ts :4 import type { Socket } from 'node:net';
net (weak) callstack-agent-device-6486788/src/__tests__/daemon-entrypoint.test.ts :5 import http from 'node:http';
net (weak) callstack-agent-device-6486788/src/__tests__/daemon-proxy.test.ts :4 import http from 'node:http';
net (weak) callstack-agent-device-6486788/src/__tests__/test-utils/loopback.ts :1 import http from 'node:http';
net (weak) callstack-agent-device-6486788/src/__tests__/upload-client.test.ts :5 import http, { type IncomingMessage, type ServerResponse } from 'node:http';
net callstack-agent-device-6486788/src/cli/update-check.ts :153 const response = await fetch(`https://registry.npmjs.org/${PACKAGE_NAME}/latest`, {
net callstack-agent-device-6486788/src/client/client-companion-tunnel-worker.ts :91 response = await fetch(`${normalizeBaseUrl(options.serverBaseUrl)}${registerPath}`, {
net (weak) callstack-agent-device-6486788/src/daemon-client/__tests__/boundary-fault-acceptance.test.ts :2 import http from 'node:http';
net (weak) callstack-agent-device-6486788/src/daemon-client/__tests__/boundary-fault-transport.test.ts :2 import http from 'node:http';

57 more not shown — this panel samples each group; the count above is the real total.

secrets 4

secrets (weak) callstack-agent-device-6486788/.github/actions/setup-fixture-app/trusted-artifact.mjs :91 return process.env.GH_TOKEN || process.env.GITHUB_TOKEN || '';
secrets (weak) callstack-agent-device-6486788/scripts/size-report.mjs :308 const token = process.env.GITHUB_TOKEN;
secrets (weak) callstack-agent-device-6486788/src/daemon-client/__tests__/daemon-client.test.ts :78 const previousAuthToken = process.env.AGENT_DEVICE_DAEMON_AUTH_TOKEN;
secrets callstack-agent-device-6486788/src/daemon-client/daemon-client-lifecycle.ts :115 const authToken = suppliedAuthToken ?? process.env.AGENT_DEVICE_DAEMON_AUTH_TOKEN;

install hooks 1

prepack callstack-agent-device-6486788/package.json :169 pnpm check:mcp-metadata && pnpm package:npm

declared dependencies 60

@agent-device/ad-replay@workspace:*
@agent-device/ad-script@workspace:*
@agent-device/capture-kit@workspace:*
@agent-device/command-registry@workspace:*
@agent-device/contracts@workspace:*
@agent-device/device-selection@workspace:*
@agent-device/host-kit@workspace:*
@agent-device/kernel@workspace:*
@agent-device/managed-allocation@workspace:*
@agent-device/maestro@workspace:*
@agent-device/platform-android@workspace:*
@agent-device/platform-apple@workspace:*

show 28 more

@agent-device/platform-harmonyos@workspace:*
@agent-device/platform-linux@workspace:*
@agent-device/platform-vega@workspace:*
@agent-device/platform-web@workspace:*
@agent-device/provider-limrun@workspace:*
@agent-device/provider-webdriver@workspace:*
@agent-device/provision-kit@workspace:*
@agent-device/replay-test@workspace:*
@agent-device/selectors@workspace:*
@agent-device/session-journal@workspace:*
@agent-device/xml@workspace:*
@arethetypeswrong/cli@^0.18.5
@chenglou/freerange@^0.0.4
@limrun/api@^0.24.5
@nkzw/eslint-plugin@^2.0.0
@nkzw/oxlint-config@^1.3.0
@stryker-mutator/core@10.0.0
@stryker-mutator/vitest-runner@10.0.0
@types/json-schema@^7.0.15
@types/node@^22.20.1
@types/pngjs@^6.0.5
@types/tar-stream@^3.1.4
@types/yauzl@^3.4.0
@vitest/coverage-v8@4.1.11
ai@^7.0.68
eslint-plugin-no-only-tests@^3.4.0
eslint-plugin-perfectionist@^5.10.1
fallow@^2.104.0

20 more not shown — this panel samples each group; the count above is the real total.

clipboard 12

clipboard shell call callstack-agent-device-6486788/packages/platform-apple/src/core/__tests__/tool-provider.test.ts :108 if (cmd === 'pbpaste') {
clipboard shell call callstack-agent-device-6486788/packages/platform-apple/src/core/app-device-io.ts :20 await runSimctl(device, ['pbpaste', device.id], { allowFailure: true }),
clipboard shell call callstack-agent-device-6486788/packages/platform-apple/src/os/macos/host-provider.ts :28 await runCommand('pbpaste', [], { allowFailure: true }),
clipboard shell call callstack-agent-device-6486788/packages/platform-linux/src/__tests__/clipboard.test.ts :39 test('readLinuxClipboard uses xclip on X11', async () => {
clipboard shell call callstack-agent-device-6486788/packages/platform-linux/src/tool-provider.ts :201 type LocalLinuxClipboardTool = 'wl-clipboard' | 'xclip' | 'xsel';
clipboard shell call callstack-agent-device-6486788/scripts/integration-progress-model.test.ts :18 "assertFlatToolCall(appleTool.calls, ['simctl', 'pbcopy', 'sim-1']);",
clipboard shell call callstack-agent-device-6486788/scripts/integration-progress-model.ts :483 'pbcopy',
clipboard shell call callstack-agent-device-6486788/test/integration/linux-e2e/coverage-manifest.ts :133 'writeLinuxClipboard uses xclip with stdin on X11',
clipboard shell call callstack-agent-device-6486788/test/integration/provider-scenarios/apple-platform-output-guard.test.ts :267 if (joined === 'pbcopy sim-1') {
clipboard shell call callstack-agent-device-6486788/test/integration/provider-scenarios/ios-lifecycle.test.ts :290 assertFlatToolCall(appleTool.calls, ['simctl', 'pbcopy', 'sim-1']);
clipboard shell call callstack-agent-device-6486788/test/integration/provider-scenarios/ios-world.ts :196 if (args.join(' ') === 'pbcopy sim-1') {
clipboard shell call callstack-agent-device-6486788/test/integration/provider-scenarios/managed-runtime-automation.test.ts :40 expect(['install', 'uninstall', 'pbpaste', 'pbcopy', 'ui', 'biometric', 'push']).toContain(

obfuscation 1

dynamic require()/import() callstack-agent-device-6486788/test/integration/installed-package-metro.test.ts :332 const mod = await import('agent-device' + subpath.slice(1));

callstack/agent-device

Drift inferred · capture-to-capture

skills & prompt files 5

danger signals3

filesystem 331

shell / exec 75

network 97

secrets 4

install hooks 1

declared dependencies 60

clipboard 12

obfuscation 1

Navigate

Stream

Features

Display