Skills
skills/aradotso/devtools-skills/folddevtools-android-webview-debugger/Gen Agent Trust Hub

folddevtools-android-webview-debugger

Warn

Audited by Gen Agent Trust Hub on May 21, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill directs users to download and install an Android APK from an unverified external source: github.com/achyuki/FoldDevtools/releases. Downloading and installing executables from non-official or untrusted repositories poses a potential security risk.
  • [COMMAND_EXECUTION]: The documentation includes multiple shell commands using the Android Debug Bridge (ADB) to interact with the device's system and network layers:
  • Socket discovery: adb shell cat /proc/net/unix | grep devtools_remote and adb shell cat /proc/net/unix | grep stetho.
  • Port forwarding: adb forward tcp:9222 localabstract:... and adb forward --remove-all.
  • Application management: adb shell am start ... to launch specific browser activities with remote debugging flags.
  • [SAFE]: The skill references the Stetho library from Facebook (com.facebook.stetho), which is a well-known and trusted service for Android debugging.
Audit Metadata
Risk Level
MEDIUM
Analyzed
May 21, 2026, 03:16 AM
Security Audit — agent-trust-hub — folddevtools-android-webview-debugger