rust-android-build
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses development tools such as cargo, llvm-readelf, zipalign, and bundletool for library compilation and artifact verification.
- [PRIVILEGE_ESCALATION]: The skill employs adb shell setprop to adjust Android system properties, such as disabling page-size compatibility modes, for testing library alignment on target devices.
- [INDIRECT_PROMPT_INJECTION]: The build process interacts with repository configuration files and external dependencies, presenting a surface for untrusted data. 1. Ingestion points: Local repository files like Cargo.toml and .cargo/config.toml. 2. Boundary markers: Relies on ELF verification and symbol allowlist diffs to validate output. 3. Capability inventory: Shell command execution for builds, artifact management, and ADB device interaction. 4. Sanitization: Verification is performed on the build output binaries rather than pre-processing input files.
- [SAFE]: All referenced external documentation and download links target official and trusted domains for Android and Rust development.
Audit Metadata