symbolize-android-stacktrace

Pass

Audited by Gen Agent Trust Hub on May 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Executes standard system utilities and developer tools including unzip, find, grep, and awk, as well as llvm-addr2line and llvm-readelf from the Android NDK to process stack trace data.
  • [COMMAND_EXECUTION]: Interacts with the GitHub CLI (gh) to resolve application identifiers from project repository files when the tool is available and authenticated.
  • [EXTERNAL_DOWNLOADS]: Communicates with the official Codemagic API (api.codemagic.io) to fetch build metadata and download debug symbol artifacts required for symbolization.
  • [DATA_EXFILTRATION]: Transmits application identifiers and build version strings to Codemagic to locate matching artifacts; this is the primary intended function of the skill.
  • [CREDENTIALS_UNSAFE]: Instructions guide the user to manage a Codemagic API key via environment variables or a local .codemagic-api-key file. The scripts use this token exclusively for authorized requests to the Codemagic API.
Audit Metadata
Risk Level
SAFE
Analyzed
May 2, 2026, 04:50 PM
Security Audit — agent-trust-hub — symbolize-android-stacktrace