android-cli
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill contains instructions for installing the CLI tool by downloading and executing scripts from dl.google.com. These are official distribution sources from a trusted organization and are standard for this developer tool.
- [COMMAND_EXECUTION]: The skill utilizes adb and android CLI commands for device interaction. It includes defensive instructions for sanitizing inputs by escaping shell metacharacters like ampersands and dollar signs to prevent command injection vulnerabilities.
- [INDIRECT_PROMPT_INJECTION]: The journey testing functionality processes XML files to automate sequences of actions. This establishes a surface where untrusted data could influence agent behavior.
- Ingestion points: Journey XML files defining test actions in SKILL.md.
- Boundary markers: Instructions specify that each action step must be evaluated independently and sequentially.
- Capability inventory: The skill provides access to device shell commands and project management tools.
- Sanitization: The documentation provides clear guidance on escaping special characters in shell inputs.
Audit Metadata