Skills
Navigate
skills/ironbee-ai/ironbee-devtools-skills/ironbee-android-devtools-cli/Gen Agent Trust Hub

ironbee-android-devtools-cli

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses adb and emulator to control Android environments and includes a run execute tool for running JavaScript-based batches of tool calls. This execution is confined to a local virtual machine that restricts access to the callTool binding.
  • [EXTERNAL_DOWNLOADS]: The skill documentation provides instructions for installing the verified vendor package @ironbee-ai/devtools via the NPM registry.
  • [PROMPT_INJECTION]: The skill exposes an indirect prompt injection surface by ingesting data from the emulator that could be controlled by malicious apps. 1. Ingestion points: UI snapshots (a11y take-ui-snapshot) and logcat data (o11y log-read, o11y log-follow). 2. Boundary markers: Absent in the instructions for data processed from the device. 3. Capability inventory: Includes app lifecycle management, UI interaction (tap, input-text), and batch script execution. 4. Sanitization: Redaction of sensitive information from logcat is enabled by default through the ANDROID_LOG_REDACT_ENABLE configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 03:24 PM
Security Audit — agent-trust-hub — ironbee-android-devtools-cli