The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides utility scripts located in the scripts/ directory that wrap standard Android developer commands. scripts/run-android.sh and scripts/build-android.sh execute ./gradlew to build and deploy applications, while scripts/capture-screenshot.sh and scripts/layout-inspector.sh utilize adb to extract UI data and screenshots from connected devices.
[EXTERNAL_DOWNLOADS]: The scripts/bootstrap-emulator.sh script automates the installation of Android system images using sdkmanager. This process fetches resources from official Google repositories and is a standard requirement for creating virtual testing environments.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests untrusted data from the UI of audited applications. Ingestion points: UI hierarchy XML and screen captures retrieved from the emulator via ADB. Boundary markers: Not implemented; scripts pass raw device output to the filesystem. Capability inventory: The agent has the ability to write files and execute local shell commands through the provided script suite. Sanitization: No filtering or sanitization of UI text content is performed, which is a common surface for indirect injection in audit-focused agents.

software-android-design