network-traffic-debug

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local repository script scripts/ci/start-local-network-fixture.sh to set up a controlled testing environment on the host machine.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data during its operation:
  • Ingestion points: Reads data from adb logcat streams, network capture files (.pcap), and JSON responses from a local network fixture API via curl and jq.
  • Boundary markers: None present; the agent is instructed to process the raw output of these diagnostic tools.
  • Capability inventory: The skill utilizes adb shell, bash, curl, and tcpdump to interact with the environment.
  • Sanitization: No specific sanitization or filtering of the external log/packet data is defined before processing.
  • [PRIVILEGE_ESCALATION]: The instructions note that low-level network capture via tcpdump and certain PCAPdroid features require root privileges on the target Android device or emulator to access the tun0 interface.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 01:13 AM