adynato-mobile
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- Indirect Prompt Injection (LOW): The skill strongly encourages a 'Server-Driven UI' (SDUI) architecture where the app's configuration, feature flags, and UI components are controlled by a remote API.
- Ingestion points: API endpoints like
/api/home/config,/api/features, and/api/copy(found inSKILL.md). - Boundary markers: Absent in the provided code snippets; there are no explicit checks or delimiters mentioned for the remote configuration data.
- Capability inventory: The architecture includes access to sensitive native APIs such as
expo-secure-storeandexpo-location(found inSKILL.md). - Sanitization: Absent; the code snippets directly map API response fields to UI components and logic states without validation.
- Data Exposure & Exfiltration (SAFE): The skill correctly recommends using
expo-secure-storefor handling sensitive data like authentication tokens, rather than standard local storage.
Audit Metadata