robot-dev
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill provides instructions for system-level configuration tasks necessary for hardware communication on Linux. Evidence: ADB_SETUP.md contains commands to install android-tools-adb via the apt package manager and modify udev rules in /etc/udev/rules.d/ to grant permissions for USB debugging.
- [PERSISTENCE]: The skill guides the user to modify shell profile configuration files to ensure that development tools are persistently available in the command line environment. Evidence: ADB_SETUP.md includes instructions to append PATH export statements to shell profiles like ~/.zshrc and ~/.bashrc.
- [INDIRECT_PROMPT_INJECTION]: The skill includes functionality to read and process output from the robot's system logs, creating a potential surface for processing unverified external data. Ingestion Point: System logs retrieved from the robot controller via adb logcat as described in SKILL.md. Capability Inventory: The skill facilitates local command execution for robot management, building applications, and deploying code. Boundary Markers: The instructions do not define specific delimiters for log output processing. Sanitization: No explicit sanitization or filtering logic for log content is mentioned in the documentation.
- [COMMAND_EXECUTION]: The skill facilitates the use of standard development and debugging tools to manage robot operations. Evidence: Deployment and diagnostic commands utilize the Android Debug Bridge (ADB) and Gradle build system.
Audit Metadata