The Agent Skills Directory

[COMMAND_EXECUTION]: The adb_shell tool provides the agent with a direct interface to execute arbitrary shell commands on a connected Android device or emulator, bypassing structured tool outputs and providing an unrestricted access point.
[DATA_EXFILTRATION]: The skill provides numerous tools that access sensitive device data that could be exfiltrated:
pull_file: Enables reading and retrieving any file from the device filesystem accessible to the ADB daemon.
read_logcat: Allows reading system logs, which often contain sensitive information, debug data, or transient credentials.
list_notifications: Accesses the content of all active notifications on the device.
capture_screenshot and record_screen: Captures full-screen visual data.
[PRIVILEGE_ESCALATION]: The skill includes tools to modify the device security state, including grant_permission and revoke_permission for application permissions, and put_setting for modifying global system settings.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from the device that could contain malicious instructions designed to manipulate the agent's behavior:
Ingestion points: UI tree dumps (capture_ui_dump), notification content (list_notifications), and system logs (read_logcat).
Boundary markers: The instructions lack directives or delimiters to ensure the agent ignores embedded instructions within this data.
Capability inventory: The agent has access to high-impact tools such as adb_shell, install_apk, push_file, and grant_permission.
Sanitization: There is no mention of filtering or sanitizing device-sourced text before it is presented to the agent.
[EXTERNAL_DOWNLOADS]: The setup instructions involve running npx android-debug-bridge-mcp, which downloads and executes code from the NPM registry.

adb-mcp