skills/android/skills/android-cli/Gen Agent Trust Hub

android-cli

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches Android CLI installation scripts from the official Google download domain (dl.google.com).
  • [REMOTE_CODE_EXECUTION]: Installation instructions include piping remote shell scripts directly into the system shell (curl ... | bash) for Linux and macOS environments, and executing downloaded batch files on Windows. These operations facilitate the setup of official development tools.
  • [COMMAND_EXECUTION]: The instructions utilize shell command substitution (e.g., adb shell input $(android screen resolve ...)) to chain tool outputs for device interaction, which is a standard pattern for Android automation.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external XML-based journey files that define testing actions.
  • Ingestion points: XML journey definitions containing sequential <action> blocks found in references/journeys.md.
  • Boundary markers: Absent; the skill relies on the agent to interpret XML elements directly.
  • Capability inventory: Includes execution of adb shell commands and specialized CLI tools for layout inspection and device control.
  • Sanitization: Absent; the agent is instructed to execute journey steps exactly as written for testing purposes.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:34 PM