apk-device-install
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
adbandagent-devicecommands to manage APK installations and verify package paths on a connected device. These operations are restricted to a user-selected device serial and include error logging for auditing. - [INDIRECT_PROMPT_INJECTION]: The skill contains logic for processing untrusted data from a target device's user interface during installation.
- Ingestion points: Reads system UI state and text using
agent-device screenshotandadb shell uiautomator dumpas described inSKILL.md. - Boundary markers: Explicit instructions require the agent to manually verify the displayed app identity, version, and risk notices against expected values before interacting with the UI.
- Capability inventory: The agent can execute shell commands, install packages, and launch applications on the device.
- Sanitization: The workflow mandates that the agent must stop and consult the user if unexpected risk notices appear, preventing automated exploitation via malicious device-side UI content.
Audit Metadata