re-frida
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill requires root access on target mobile devices using commands like
adb shell "su -c ..."andadb root. - [COMMAND_EXECUTION]: Uses
adbfor file management and execution on mobile devices, including changing file permissions (chmod 755). - [DYNAMIC_EXECUTION]: Utilizes Frida's core functionality to perform runtime code injection and hooking (e.g.,
Interceptor.attach,Java.perform,Memory.protect). - [EXTERNAL_DOWNLOADS]: Fetches official
frida-serverbinaries from GitHub and installs Python tools from PyPI, which are recognized as trusted platforms. - [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: Intercepted function arguments and network buffers. 2. Boundary markers: Structural JSON output for logs. 3. Capability inventory: ADB shell access, Frida memory modification, and file system writes. 4. Sanitization: Structural encapsulation via JSON, but the skill lacks sanitization for interpolated application data.
Audit Metadata