The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/profile.py interacts with the host's adb binary using subprocess.run. This is the intended functionality for remote device profiling. The skill implements security best practices by using shlex.quote to sanitize all inputs passed to the device shell, mitigating potential command injection vulnerabilities.
[DATA_EXFILTRATION]: The skill enables the capture of system traces which are then retrieved from the device via adb pull. The documentation explicitly warns the user that these traces contain sensitive system and application information. The skill does not automatically transmit this data to any external network location; it remains in the user's local environment.
[SAFE]: All identified behaviors are consistent with the skill's stated purpose of black-box performance profiling. There are no signs of obfuscation, hidden remote code execution, or persistence mechanisms.

android-app-profiling