Galaxy Linux is a convenience layer for running a Linux userspace on Android. PRoot is not a strong security sandbox and this project should not be treated as a VM boundary.
Please report security issues privately to the repository maintainer rather than publishing exploit details in a public issue.
The installer intentionally avoids password-cracking, exploitation and automated attack tooling. Users can install ordinary Arch packages themselves for legitimate development and authorized security work.