android-gallery-bugfix-skill
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of standard Android Debug Bridge (adb) commands for environment inspection and log collection, including 'adb logcat', 'adb shell dumpsys', and 'adb shell ls'. These are intended for manual execution by a developer during the debugging process.
- [COMMAND_EXECUTION]: The instructions incorporate references to 'codegraph explore', a tool used for static analysis and codebase exploration to help identify relevant code paths for MediaStore queries and image-loading logic.
- [SAFE]: The skill promotes security and privacy best practices by explicitly advising against logging sensitive user data (PII) such as photo URIs and absolute paths, recommending redaction to IDs and MIME types instead.
- [SAFE]: The provided Kotlin code snippets follow official Android documentation for Scoped Storage, MediaStore queries, and permission handling across different API levels (Android 9 through 14+).
Audit Metadata