lsfg-android-frame-generation
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs the agent to set up and grant several high-privilege Android permissions:
SYSTEM_ALERT_WINDOW(Display over other apps) andTYPE_ACCESSIBILITY_OVERLAYallow the application to draw content over the entire screen.LsfgAccessibilityServiceuses the Android Accessibility Service framework, which can potentially intercept user interactions.- Integration with
Shizukuis used to access restricted system APIs for frame timing diagnostics, which requires a privileged side-channel. - [COMMAND_EXECUTION]: The skill documentation includes shell commands for project setup and deployment:
git clone --recurse-submodulesfor repository retrieval../gradlewfor building the Android application and native components.adb installfor pushing the compiled APK to a connected device.- [EXTERNAL_DOWNLOADS]: The project fetches its source code and required submodules from a public repository on GitHub (
https://github.com/FrankBarretta/LSFG-Android.git). - [DYNAMIC_EXECUTION]: The application employs native library loading and runtime resource processing:
System.loadLibrary("lsfg_android")is used to load the JNI bridge.- The application processes a user-provided
Lossless.dllvia the Storage Access Framework to extract shaders into private storage at runtime. - [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface for indirect injection via processed data:
- Ingestion points: The application captures live screen data via
MediaProjectionand ingests an externalLossless.dllfile. - Boundary markers: None are present in the processing logic described.
- Capability inventory: The skill has access to Vulkan GPU contexts, native code execution (JNI), and the ability to draw over the system UI.
- Sanitization: The skill mentions shader extraction but does not detail sanitization or integrity checks for the user-provided binary file.
Audit Metadata