android-development

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). This repo contains explicit instructions to fetch-and-execute a third‑party setup script to install KernelSU-Next (remote code execution / privilege escalation / supply‑chain risk) and documents enabling ADB/root/monkey fuzzing options that could be abused for persistent remote access or credential theft.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required runtime workflow includes log acquisition from the connected device via scripts/debug/capture_logs.sh/ADB (outsider-authored free text: device-emitted logcat/dmesg/tombstones from an external party’s environment), which can then be inserted into the LLM’s context for diagnosis.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes an explicit runtime command that pipes a remote script to the shell — "https://raw.githubusercontent.com/KernelSU-Next/KernelSU-Next/refs/heads/dev/kernel/setup.sh" is fetched via curl and piped to bash, which executes remote code at runtime.