The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references standard Android libraries from Google, such as androidx.work:work-runtime-ktx. These are official, trusted dependencies for Android development.
[PRIVILEGE_ESCALATION]: The troubleshooting section describes how to request the ACTION_REQUEST_IGNORE_BATTERY_OPTIMIZATIONS permission. This is a legitimate system-level permission request used to ensure that background tasks are not terminated by Android's power management features.
[INDIRECT_PROMPT_INJECTION]: The skill documentation includes examples of Workers ingesting data.
Ingestion points: The UploadWorker and DownloadWorker snippets in SKILL.md ingest potentially untrusted strings via inputData.getString(KEY_FILE_URI) and inputData.getString(KEY_URL).
Boundary markers: None present in the simplified code templates.
Capability inventory: The snippets demonstrate common background operations including file uploading (uploadFile), downloading (downloadFile), and database persistence (saveToDatabase).
Sanitization: None demonstrated in the basic templates, as is typical for instructional code snippets. This pattern represents a standard data handling surface for Android applications rather than a vulnerability within the skill itself.

workmanager