android-package-diagnostics

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/pkgdiag.py executes external binaries (adb and aapt2) using the subprocess.run method. Security is maintained by using the list-based argument format, which avoids shell interpretation, and by sanitizing package name inputs against a restrictive regular expression (PKG_RE) before they are used in commands.- [DATA_EXFILTRATION]: No network operations or external data exfiltration patterns were identified. The skill's operations are confined to the local machine and the connected Android device.- [CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or sensitive environmental paths are accessed or exposed by the skill.- [PROMPT_INJECTION]: The skill instructions and evaluation cases do not contain any patterns indicative of prompt injection, role-play bypasses, or instructions to ignore safety guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 04:31 PM
Security Audit — agent-trust-hub — android-package-diagnostics