android-debloat

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Uses the adb (Android Debug Bridge) utility to interact with connected devices. It executes diagnostic commands such as dumpsys and top, and modification commands including pm disable-user, pm uninstall, and settings put to manage packages and system scales.
  • [EXTERNAL_DOWNLOADS]: Fetches a package database in JSON format from the Universal-Debloater-Alliance repository on GitHub. This is used as a reference for identifying which packages are safe to disable or remove.
  • [DYNAMIC_EXECUTION]: Pushes and executes shell scripts on the target Android device's /data/local/tmp/ directory. These scripts are run asynchronously using nohup for tasks such as bulk file transfers to microSD cards.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes an external JSON package list which determines which applications are flagged for removal.
  • Ingestion points: Fetches uad_lists.json from a remote GitHub URL into the agent's context.
  • Boundary markers: The instructions explicitly state to "cross-reference" and "apply user-context overrides," emphasizing human-in-the-loop verification rather than automated execution.
  • Capability inventory: The skill uses adb shell which allows for package management, file system access, and modification of global system settings on the connected device.
  • Sanitization: The skill recommends logging every change to a rollback ledger on the device to ensure changes can be reverted if necessary.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 10:26 PM