ios-android-logs
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION] (MEDIUM): The skill provides instructions for extracting high-sensitivity system diagnostic files, including Android bug reports (
adb bugreport), ANR traces (/data/anr/traces.txt), and native tombstones (/data/tombstones/). These files frequently leak PII, session tokens, and application secrets. The severity is adjusted to MEDIUM as these capabilities are intrinsic to the primary skill purpose of debugging.\n- [EXTERNAL_DOWNLOADS] (MEDIUM): The skill recommends the installation of the third-party packagepidcatviapip. This package is not from a trusted source or organization defined in the security policy.\n- [PROMPT_INJECTION] (LOW): Reading untrusted log data from apps creates an indirect prompt injection risk. Ingestion points:adb logcatandxcrun log stream. Boundary markers: None (the skill lacks instructions to delimit or escape log content). Capability inventory: Shell command execution viaadbandxcrun. Sanitization: None. Malicious apps could write commands to the logs to influence agent behavior.\n- [COMMAND_EXECUTION] (LOW): The skill details numerous commands for interacting with device shells and system-level debugging tools.
Audit Metadata