android-profiler
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the
trace_processorbinary and several helper scripts from official vendor domains and repositories. - Fetches
trace_processorfromget.perfetto.dev. - Downloads
java_heap_dump,heap_profile,cpu_profile, andrecord_android_tracefrom Google's official Perfetto tools repository on GitHub. - [REMOTE_CODE_EXECUTION]: Downloads and executes shell scripts from the vendor's official GitHub repository to perform profiling operations on Android devices.
- Uses
curlandchmod +xto prepare and run helper scripts as described inperfetto_trace_recording.mdandreferences/perfetto/setup.md. - [COMMAND_EXECUTION]: Orchestrates the execution of the
trace_processortool via shell commands to process trace files and run analytical queries. - Manages local background sessions using
trace_processor server unixand executes queries withtrace_processor query --remote. - [PROMPT_INJECTION]: The skill ingests external Android trace data and URLs which could potentially contain malicious inputs; however, it implements robust analysis principles to mitigate these risks.
- Ingestion points: Android trace files (
.pftrace,.perfetto-trace,.pb) and external URLs loaded intotrace_processor. - Boundary markers: The skill enforces guiding principles like 'Empirical Data Grounding' and 'Evidence-First Explanation' to ensure the agent relies on raw metrics rather than external data strings.
- Capability inventory: The skill has access to shell execution for profiling tools and filesystem access for trace management.
- Sanitization: Employs schema validation using
LIMIT 0queries to verify table structures before execution. - [DYNAMIC_EXECUTION]: Dynamically constructs and executes PerfettoSQL queries against trace data to identify performance issues like jank and memory leaks.
- Instructions in
references/perfetto/sql.mdguide the agent in drafting and debugging queries during a session.
Audit Metadata