anubis-android-app-manager

Warn

Audited by Gen Agent Trust Hub on Apr 15, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill defines a Shizuku-based service (ShizukuUserService) that executes shell commands via Runtime.getRuntime().exec. This allows arbitrary command execution with high privileges on the Android device.
  • [COMMAND_EXECUTION]: Implementation details show the use of pm disable-user, pm enable, and am force-stop to manipulate system application states.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to clone code from a third-party GitHub repository (https://github.com/sogonov/anubis) which is not associated with the skill author's verified infrastructure.
  • [DATA_EXFILTRATION]: The skill utilizes high-privilege shell commands such as dumpsys connectivity and pm list packages to extract internal system configuration and application metadata.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 15, 2026, 12:59 PM