capacitor-android-dex-optimization
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external files including package.json, plugin README.md files within node_modules, and missing_rules.txt generated during the build process.
- Ingestion points: Reads dependency metadata from package.json, configuration instructions from README.md files in node_modules, and R8-generated build warnings from missing_rules.txt.
- Boundary markers: The instructions do not define delimiters or specific safety warnings to ignore potentially malicious instructions embedded within these external data sources.
- Capability inventory: The skill has the capability to write to local configuration files (proguard-rules.pro), execute build commands via gradlew, install APKs via adb, and unzip files.
- Sanitization: There is no explicit sanitization or validation of the content read from external files before it is used to modify the project's security configuration.
- [COMMAND_EXECUTION]: The skill requires the execution of shell commands to build, install, and verify the application.
- Evidence: Uses ./gradlew assembleRelease and ./gradlew bundleRelease for building artifacts.
- Evidence: Uses adb install and adb logcat for deploying to and monitoring devices.
- Evidence: Uses unzip -p to inspect the contents of the generated Android App Bundle.
Audit Metadata