to-android-integrate
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a compatibility catalog and Android Maven archives from the official GitHub repository for agent-easy-use/mobile-easy-use.
- [COMMAND_EXECUTION]: The skill runs a local Node.js script (scripts/ensure-artifacts.mjs) to manage artifacts and uses the system's tar utility to extract them. It also generates adb and npx commands for user-authorized execution.
- [INDIRECT_PROMPT_INJECTION]: The skill processes existing Android project configuration files to determine integration points.
- Ingestion points: Android project files and the remote compatibility catalog.
- Boundary markers: The instructions require user confirmation for version updates and variant selection.
- Capability inventory: The skill can write to the file system, execute local scripts, and initiate network requests for vendor artifacts.
- Sanitization: The management script validates version strings and JSON schema before processing the catalog.
Audit Metadata