android-tombstone-symbolication
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- External Resource Acquisition: The skill fetches ELF debug information and NuGet packages from
msdl.microsoft.comandapi.nuget.org. These downloads are used to retrieve the necessary symbol metadata for diagnosing .NET runtime crashes. - Tool Invocation: It executes command-line utilities such as
llvm-symbolizerandllvm-readelfon the downloaded files. This is the standard procedure for mapping binary memory addresses back to source code lines during crash triage. - Input Processing Considerations: The skill processes crash logs (tombstones) which may originate from untrusted sources. It uses specific regular expression patterns to extract technical metadata such as BuildIds and program counter offsets, which limits the potential for interpreting unintended instructions within the log text.
Audit Metadata