adb-uiautomator
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the legitimate
uiautomator2library for Android interaction. All scripts (adb-uiautomator-find.py,adb-uiautomator-tap.py,adb-uiautomator-wait.py, andtest-uiautomator-connection.py) implement standard automation logic without suspicious behaviors. - [COMMAND_EXECUTION]: The workflows (
element-detection.toon,ui-interaction.toon) execute ADB shell commands such asuiautomator dumpandinput tap. These are restricted to the primary purpose of the skill and use standard ADB utilities. - [EXTERNAL_DOWNLOADS]: The scripts list
uiautomator2andclickas dependencies. These are well-known, safe libraries from standard registries (PyPI). - [DATA_EXPOSURE]: Screen captures and UI dumps are stored in
/tmp/. While this is a shared directory, it is standard practice for temporary storage in automation workflows and does not constitute exfiltration.
Audit Metadata