play-store-app-install
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/playapp.pyinteracts with the Android Debug Bridge (adb) viasubprocess.runto perform device status checks, installations, and app launches. This is the primary function of the skill and is implemented with proper input sanitization usingshlex.quoteto prevent shell injection vulnerabilities. - [SAFE]: The documentation and instructions explicitly prohibit downloading APKs from unofficial scrapers or mirror sites, citing security and provenance risks. It also correctly advises against automating Google account sign-ins to avoid breaching Terms of Service and bypassing security features like 2FA.
- [SAFE]: The skill uses standard environment variables (
ANDROID_HOME,ANDROID_SDK_ROOT) and common system paths to locate theadbbinary, following standard developer workflows without attempting to modify system configurations.
Audit Metadata