android-cli
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute installation scripts via shell pipes and temporary files (e.g.,
curl | bash,curl -o %TEMP%\i.cmd). These resources are hosted on Google's official infrastructure (dl.google.com), a trusted source, and represent standard installation patterns for developer tools.\n- [EXTERNAL_DOWNLOADS]: Fetches theandroidCLI binary and SDK packages from Google's domains (dl.google.com,developer.android.com). It also references an official skill repository on GitHub (github.com/android/skills) for extending capabilities.\n- [COMMAND_EXECUTION]: Orchestrates various development tasks by executing subcommands of theandroidCLI, including environment initialization, SDK management, and application deployment.\n- [PRIVILEGE_ESCALATION]: Includes commands requiring elevated permissions, such assudo apt-get installand specificroot/admininstallation scripts, necessary for system-wide configuration.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface through project discovery and UI layout inspection.\n - Ingestion points: Analyzes project directories via
android describeand inspects application UI trees viaandroid layout.\n - Boundary markers: None explicitly defined in instructions; the tool relies on structured CLI output.\n
- Capability inventory: Execution of shell commands via the
androidCLI, network lookups for documentation, and file system metadata discovery.\n - Sanitization: None described in the instructions, assuming the underlying CLI tool handles parsing of external data safely.
Audit Metadata