build-agent-phone
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill involves the execution of standard build commands including
pnpmandgradlewfor compiling Android applications, running tests, and linting. It also includes commands for process management such askill <pid>,adb emu kill, andadb kill-serverfor environment cleanup. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from build tools, unit tests, and linting reports (
:app:lint,:app:testDebugUnitTest). While this provides a surface for indirect injection from the codebase being built, the risk is inherent to build automation and the skill includes specific instructions for isolated test environments. - [CREDENTIALS_UNSAFE]: The documentation references environment variables for Android signing keys, such as
OPENSTEER_AGENT_PHONE_KEYSTORE_PASSWORDandOPENSTEER_AGENT_PHONE_KEY_PASSWORD. These are documented as configuration requirements for the user to provide, rather than being hardcoded secrets or instructions to store credentials insecurely.
Audit Metadata