The Agent Skills Directory

Standard Command Execution: The skill utilizes the gcloud CLI to manage sessions and devices on the Google Cloud Platform. This is the expected and primary method for interacting with the Developer Device Platform service.
Usage Attribution and Telemetry: The skill instructs the agent to set the CLOUDSDK_METRICS_REQUEST_ATTRIBUTION environment variable and custom User-Agent headers. These are standard vendor practices for tracking skill usage and do not involve the exfiltration of sensitive user data.
Indirect Prompt Injection Surface: The skill processes external data in the form of logs (output.log, logcat.txt) and test results (junit.xml) retrieved from Cloud Storage. While these could theoretically contain instructions targeting the LLM, the skill's role is to report these results to the user, which is a standard operational requirement.
Remote Device Management: The skill provides templates for shell scripts to be executed on remote Android devices. These scripts include routine operations such as chmod for executables and directory management for outputs, which are appropriately scoped to the /data/local/tmp directory on the target device.
Credential Management: The skill directs users to standard authentication flows (gcloud auth login) and properly identifies the need for specific IAM roles, following the principle of least privilege for Google Cloud operations.

developer-device-platform-device-run