android-adb-terminal
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of
adb shellto run various commands on connected Android devices, including activity management (am), package management (pm), and UI simulation (input). This is a standard feature for Android development environments. - [DATA_EXFILTRATION]: Includes instructions for moving data from a device to the local host using
adb pulland taking screenshots viaadb shell screencap. These are legitimate utilities for debugging and data collection during development. - [PROMPT_INJECTION]: The skill uses
adb logcatto read device logs, which creates an indirect prompt injection surface where a malicious app on the device could output strings designed to influence the agent's behavior if it parses log content. - Ingestion points: Log data retrieved via
adb logcat. - Boundary markers: Not present.
- Capability inventory: The skill allows arbitrary device command execution via
adb shelland file system access viapush/pull. - Sanitization: There is no mention of sanitizing or validating the log output before it is processed by the agent.
Audit Metadata