androidstudio-app-pentest-environment
Warn
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill clones the rootAVD repository from a non-trusted GitLab source and executes the rootAVD.sh script to modify emulator system images.
- [EXTERNAL_DOWNLOADS]: Downloads various security frameworks, modules, and binaries from non-trusted repositories, including Magisk, ZygiskNext, Shamiko, LSPosed, Frida, and JustTrustMe.
- [COMMAND_EXECUTION]: Modifies the user's shell configuration files (.bash_profile and .zshrc) to persist environment variable changes and path updates.
- [PRIVILEGE_ESCALATION]: Frequently utilizes adb root, adb remount, and su -c to gain administrative access and modify protected system directories, such as the system certificate store.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external parameters like AVD identifiers and package names directly into shell commands. It lacks sanitization, boundary markers, or explicit warnings to ignore instructions embedded in target application data, creating a surface for command injection.
Audit Metadata