rev-dex-dumper
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple
adbcommands to interact with a connected Android device, including file transfers (adb push,adb pull) and shell commands (adb shell chmod,adb shell pidof). - [REMOTE_CODE_EXECUTION]: A bundled binary executable named
panda-dex-dumperis pushed to the target device's/data/local/tmp/directory and executed to perform memory dumping. - [PRIVILEGE_ESCALATION]: The instructions recommend obtaining root access via
adb rootorsuon the Android device to enable theptracesystem call required for memory introspection. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with untrusted data from the Android device.
- Ingestion points: The skill reads the output of
adb shell dumpsys activity topto automatically identify the target package name. - Boundary markers: No explicit markers or warnings for handling untrusted package names are present.
- Capability inventory: The skill possesses capabilities for remote shell execution and local file system access via ADB.
- Sanitization: Basic shell processing (grep, awk, cut) is used on the command output without comprehensive sanitization of the resulting package name.
Audit Metadata