android-adb-terminal

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents the use of adb shell to run various commands on connected Android devices, including activity management (am), package management (pm), and UI simulation (input). This is a standard feature for Android development environments.
  • [DATA_EXFILTRATION]: Includes instructions for moving data from a device to the local host using adb pull and taking screenshots via adb shell screencap. These are legitimate utilities for debugging and data collection during development.
  • [PROMPT_INJECTION]: The skill uses adb logcat to read device logs, which creates an indirect prompt injection surface where a malicious app on the device could output strings designed to influence the agent's behavior if it parses log content.
  • Ingestion points: Log data retrieved via adb logcat.
  • Boundary markers: Not present.
  • Capability inventory: The skill allows arbitrary device command execution via adb shell and file system access via push/pull.
  • Sanitization: There is no mention of sanitizing or validating the log output before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 03:00 AM