android-use
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly dumps and parses the device UI XML via adb uiautomator dump (pulling /sdcard/window_dump.xml and parsing with scripts/parse_ui.py) and uses element text to drive actions, which may contain arbitrary untrusted/user-generated content from apps or webviews on the device and thus could enable indirect prompt injection.
Audit Metadata