android-automation
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous adb command examples for device interaction (e.g., adb pair, adb shell input). These are restricted by the allowed-tools frontmatter to the adb binary.\n- [PRIVILEGE_ESCALATION]: Installation steps for Linux recommend using sudo with package managers (apt, dnf, pacman) to install Android tools. This is the standard method for system-wide package installation.\n- [EXTERNAL_DOWNLOADS]: The skill references official Android SDK Platform-Tools downloads from developer.android.com. As an official resource provided by Google, this is a trusted source.\n- [INDIRECT_PROMPT_INJECTION]: The skill's architecture involves ingesting untrusted data from external Android devices.\n
- Ingestion points: UI hierarchy data is retrieved via 'adb shell uiautomator dump' as described in SKILL.md.\n
- Boundary markers: None currently documented for delimiting device-sourced data within the agent's context.\n
- Capability inventory: The skill has access to adb and node through the Bash tool, allowing for significant device and local system interaction.\n
- Sanitization: No sanitization or validation of the XML UI dump is mentioned.
Audit Metadata