android-package-diagnostics
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/pkgdiag.pyexecutes external binaries (adbandaapt2) using thesubprocess.runmethod. Security is maintained by using the list-based argument format, which avoids shell interpretation, and by sanitizing package name inputs against a restrictive regular expression (PKG_RE) before they are used in commands.- [DATA_EXFILTRATION]: No network operations or external data exfiltration patterns were identified. The skill's operations are confined to the local machine and the connected Android device.- [CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or sensitive environmental paths are accessed or exposed by the skill.- [PROMPT_INJECTION]: The skill instructions and evaluation cases do not contain any patterns indicative of prompt injection, role-play bypasses, or instructions to ignore safety guidelines.
Audit Metadata