android-jni-ndk
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download a compliance verification script from the official Android Source code repository (cs.android.com). The script is retrieved via the Gitiles API in a Base64-encoded format and decoded locally, which is the standard delivery mechanism for that service.
- [REMOTE_CODE_EXECUTION]: Defines a procedure to download and execute the 'check_elf_alignment.sh' script from a trusted organization (Google). This is a documented process for ensuring application compatibility with modern Android kernel configurations.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a workflow for the agent to ingest and analyze external, untrusted data such as Android tombstones and crash records. -- Ingestion points: Ingests 'tombstone.txt' for analysis using symbols (references/native-crashes-and-debugging.md). -- Boundary markers: No specific delimiters or warnings to ignore embedded instructions are included in the processing instructions. -- Capability inventory: The skill utilizes several shell capabilities including 'ndk-stack', 'llvm-readelf', 'llvm-addr2line', and 'adb' for device interaction. -- Sanitization: No sanitization or filtering is applied to the tombstone text before it is passed to diagnostic utilities.
Audit Metadata