android-profiler

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the trace_processor binary and several helper scripts from official vendor domains and repositories.
  • Fetches trace_processor from get.perfetto.dev.
  • Downloads java_heap_dump, heap_profile, cpu_profile, and record_android_trace from Google's official Perfetto tools repository on GitHub.
  • [REMOTE_CODE_EXECUTION]: Downloads and executes shell scripts from the vendor's official GitHub repository to perform profiling operations on Android devices.
  • Uses curl and chmod +x to prepare and run helper scripts as described in perfetto_trace_recording.md and references/perfetto/setup.md.
  • [COMMAND_EXECUTION]: Orchestrates the execution of the trace_processor tool via shell commands to process trace files and run analytical queries.
  • Manages local background sessions using trace_processor server unix and executes queries with trace_processor query --remote.
  • [PROMPT_INJECTION]: The skill ingests external Android trace data and URLs which could potentially contain malicious inputs; however, it implements robust analysis principles to mitigate these risks.
  • Ingestion points: Android trace files (.pftrace, .perfetto-trace, .pb) and external URLs loaded into trace_processor.
  • Boundary markers: The skill enforces guiding principles like 'Empirical Data Grounding' and 'Evidence-First Explanation' to ensure the agent relies on raw metrics rather than external data strings.
  • Capability inventory: The skill has access to shell execution for profiling tools and filesystem access for trace management.
  • Sanitization: Employs schema validation using LIMIT 0 queries to verify table structures before execution.
  • [DYNAMIC_EXECUTION]: Dynamically constructs and executes PerfettoSQL queries against trace data to identify performance issues like jank and memory leaks.
  • Instructions in references/perfetto/sql.md guide the agent in drafting and debugging queries during a session.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 06:11 PM
Security Audit — agent-trust-hub — android-profiler