diagnose-android-overheating
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of
adb shellto execute diagnostic commands on a connected Android device. This includes system-level queries such asdumpsys,getprop, andtopto monitor thermal state, battery usage, and process activity. - [DATA_EXFILTRATION]: The skill facilitates the collection of highly sensitive device data, specifically through the
adb bugreportcommand. As noted in the documentation, these reports can contain account identifiers, app activity, network details, and notifications. However, the skill provides explicit instructions to redact sensitive information and requires informed user approval before any data is transmitted. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) because it ingests and processes output from external
adbcommands, which could theoretically contain malicious data from a compromised device. - Ingestion points: Data enters the agent context through the output of
adb shellcommands andadb bugreportextractions. - Boundary markers: The skill lacks formal delimiters or LLM-specific boundary markers for command output, though it enforces a specific output format for the agent's findings.
- Capability inventory: The agent has the capability to execute shell commands via the
adbtool across multiple scripts and workflow stages. - Sanitization: The skill mandates manual redaction of sensitive fields (serials, phone numbers, accounts) by the agent/user before data sharing.
Audit Metadata