android-debloat
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses the
adb(Android Debug Bridge) utility to interact with connected devices. It executes diagnostic commands such asdumpsysandtop, and modification commands includingpm disable-user,pm uninstall, andsettings putto manage packages and system scales. - [EXTERNAL_DOWNLOADS]: Fetches a package database in JSON format from the Universal-Debloater-Alliance repository on GitHub. This is used as a reference for identifying which packages are safe to disable or remove.
- [DYNAMIC_EXECUTION]: Pushes and executes shell scripts on the target Android device's
/data/local/tmp/directory. These scripts are run asynchronously usingnohupfor tasks such as bulk file transfers to microSD cards. - [INDIRECT_PROMPT_INJECTION]: The skill processes an external JSON package list which determines which applications are flagged for removal.
- Ingestion points: Fetches
uad_lists.jsonfrom a remote GitHub URL into the agent's context. - Boundary markers: The instructions explicitly state to "cross-reference" and "apply user-context overrides," emphasizing human-in-the-loop verification rather than automated execution.
- Capability inventory: The skill uses
adb shellwhich allows for package management, file system access, and modification of global system settings on the connected device. - Sanitization: The skill recommends logging every change to a rollback ledger on the device to ensure changes can be reverted if necessary.
Audit Metadata