android-performance-observability
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to search the codebase and evaluate performance hooks, which involves ingesting untrusted data from the repository.\n
- Ingestion points: The agent performs recursive searches on the repository using the
rgtool inSKILL.mdandreferences/scenarios.md.\n - Boundary markers: There are no explicit instructions for the agent to distinguish between its internal instructions and the content retrieved from the repository.\n
- Capability inventory: The skill environment allows for the execution of build commands (
gradlew) and Python scripts (eval_triggers.py).\n - Sanitization: The skill does not define methods for validating or sanitizing the content discovered in the repository before the agent processes it.\n- [COMMAND_EXECUTION]: The skill documents commands to build projects and run evaluation scripts.\n
- Evidence:
SKILL.mdandscripts/run_examples.shcontain instructions for executing./gradlew :app:assembleDebugandpython3 scripts/eval_triggers.py.\n- [EXTERNAL_DOWNLOADS]: The skill provides links to official developer documentation.\n - Evidence:
SKILL.mdandreferences/official-links.mdlink todeveloper.android.comfor official Android performance and benchmarking guides.
Audit Metadata