mobile-testing
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: All emulator interactions are performed through the
ironbee-android-devtools-cliutility. The skill leverages this tool to drive UI flows, manage application lifecycles, and capture diagnostic data. The use of this tool is explicitly defined and limited to the vendor's own CLI implementation. - [SAFE]: Examples involving sensitive user data, such as login flows, correctly use placeholders (e.g.,
"secret","a@b.com") rather than hardcoding actual credentials. - [SAFE]: Network interception and mocking capabilities are implemented using Frida-based hooks specifically for OkHttp-based stacks. This is a standard functional testing technique for inspecting encrypted traffic in a controlled emulator environment and does not involve installing unauthorized root certificates or global proxies on the host system.
- [SAFE]: The skill configuration uses the
allowed-toolsfield to scope the agent's execution environment to the specific CLI tool required for its functionality.
Audit Metadata