software-android-runtime-debugging

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for standard Android development commands such as adb, gradlew, and aapt2. This includes a procedure for clearing the local Gradle build cache directory (~/.gradle/caches/build-cache-1/) to resolve persistent build corruption.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential surface for indirect prompt injection through the analysis of external log data.
  • Ingestion points: The agent is instructed to read and interpret Logcat logs, ANR trace files, and UI hierarchy dumps.
  • Boundary markers: The instructions do not define explicit delimiters for untrusted log data.
  • Capability inventory: The skill utilizes subprocess calls to adb and Gradle.
  • Sanitization: No explicit content filtering or sanitization of external log content is described.
  • [EXTERNAL_DOWNLOADS]: The skill correctly references documentation and configuration from well-known and trusted services such as Google's official Android developer site, the Gradle user guide, Perfetto, and Square's LeakCanary documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 09:10 PM
Security Audit — agent-trust-hub — software-android-runtime-debugging