android-cli

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute installation scripts via shell pipes and temporary files (e.g., curl | bash, curl -o %TEMP%\i.cmd). These resources are hosted on Google's official infrastructure (dl.google.com), a trusted source, and represent standard installation patterns for developer tools.\n- [EXTERNAL_DOWNLOADS]: Fetches the android CLI binary and SDK packages from Google's domains (dl.google.com, developer.android.com). It also references an official skill repository on GitHub (github.com/android/skills) for extending capabilities.\n- [COMMAND_EXECUTION]: Orchestrates various development tasks by executing subcommands of the android CLI, including environment initialization, SDK management, and application deployment.\n- [PRIVILEGE_ESCALATION]: Includes commands requiring elevated permissions, such as sudo apt-get install and specific root/admin installation scripts, necessary for system-wide configuration.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface through project discovery and UI layout inspection.\n
  • Ingestion points: Analyzes project directories via android describe and inspects application UI trees via android layout.\n
  • Boundary markers: None explicitly defined in instructions; the tool relies on structured CLI output.\n
  • Capability inventory: Execution of shell commands via the android CLI, network lookups for documentation, and file system metadata discovery.\n
  • Sanitization: None described in the instructions, assuming the underlying CLI tool handles parsing of external data safely.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 10:25 AM