android-lifecycle-debugger
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions define a manual and tool-assisted workflow for investigating Android application bugs. The logic is consistent with its stated purpose of debugging Activity, Fragment, and ViewModel lifecycle transitions.
- [COMMAND_EXECUTION]: The skill utilizes local analysis tools like codegraph and ripgrep (rg) to explore project source code and traces. These tools are used within their intended scope for code navigation.
- [PROMPT_INJECTION]: The skill processes untrusted Android project code and logs, creating an attack surface for Indirect Prompt Injection (Category 8). 1. Ingestion points: Activity, Fragment, ViewModel source code, navigation logic, and stack traces. 2. Boundary markers: No explicit delimiters are specified for user-provided code. 3. Capability inventory: Uses codegraph and filesystem search tools (rg, find). 4. Sanitization: No sanitization of external content is specified.
Audit Metadata