android-cli
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches Android CLI installation scripts from the official Google download domain (
dl.google.com). - [REMOTE_CODE_EXECUTION]: Installation instructions include piping remote shell scripts directly into the system shell (
curl ... | bash) for Linux and macOS environments, and executing downloaded batch files on Windows. These operations facilitate the setup of official development tools. - [COMMAND_EXECUTION]: The instructions utilize shell command substitution (e.g.,
adb shell input $(android screen resolve ...)) to chain tool outputs for device interaction, which is a standard pattern for Android automation. - [INDIRECT_PROMPT_INJECTION]: The skill processes external XML-based journey files that define testing actions.
- Ingestion points: XML journey definitions containing sequential
<action>blocks found inreferences/journeys.md. - Boundary markers: Absent; the skill relies on the agent to interpret XML elements directly.
- Capability inventory: Includes execution of
adbshell commands and specialized CLI tools for layout inspection and device control. - Sanitization: Absent; the agent is instructed to execute journey steps exactly as written for testing purposes.
Audit Metadata