termux-api
Warn
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The skill provides commands to access highly sensitive personal data from the Android device, including SMS history (
termux-sms-list), contact lists (termux-contact-list), call logs (termux-call-log), real-time GPS coordinates (termux-location), and the system clipboard (termux-clipboard-get). It also details the use ofscpto transfer files from the device to an external local path. - [COMMAND_EXECUTION]: The core functionality relies on executing shell commands over SSH (
ssh -p 8022) to interface with the Termux:API binaries on the target device. - [INDIRECT_PROMPT_INJECTION]: The skill defines command templates that interpolate external data (such as phone numbers, messages, and URLs) into shell strings (e.g.,
termux-sms-send -n <number> "message"andtermux-open-url <url>). There are no boundary markers or instructions to sanitize these inputs, creating a surface for command injection if the agent processes untrusted data. - [EXTERNAL_DOWNLOADS]: The skill includes the
termux-downloadcommand, which allows the agent to trigger the download of arbitrary files from remote URLs to the Android device storage.
Audit Metadata