android-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow for inspecting/evaluating an Android app via android layout (UI dump including text/contentDesc) and journey steps consumes free text originating from the app’s on-screen UI (which can be outsider-authored).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's installation steps (lines SKILL.md:8-11) explicitly run remote installer scripts via curl piped to a shell (e.g., https://dl.google.com/android/cli/latest/linux_x86_64/install.sh and its darwin/windows variants), which fetch and execute remote code as a required setup dependency.