adb-workflow-orchestrator
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runinscripts/adb-run-workflow.pyandscripts/run-bluestacks-demo.pyto execute ADB commands and local automation scripts. Analysis shows that these commands are constructed using list arguments rather than shell strings, which effectively mitigates shell injection risks. The operations are consistent with the skill's primary purpose of mobile device automation. - [INDIRECT_PROMPT_INJECTION]: The orchestrator ingests external TOON (YAML) files to define workflows. While this introduces a potential attack surface if an attacker provides malicious workflow files, the execution logic is restricted to finding and running local Python scripts already present in the
.claude/skills/directory structure, limiting the potential impact.
Audit Metadata