implementing-android-code
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [PROMPT_INJECTION]: No prompt injection or behavior override patterns were detected in the instructions or metadata.
- [DATA_EXPOSURE]: The skill explicitly promotes security best practices for data handling. It instructs developers to use
@EncryptedPreferencesfor credentials and tokens, and to apply@IgnoredOnParcelto sensitive fields in ViewModels to prevent accidental leaks during process death recovery. No hardcoded secrets were found in the templates. - [OBFUSCATION]: No obfuscated content, homoglyphs, or hidden characters were detected in the skill files.
- [REMOTE_CODE_EXECUTION]: No remote script downloads or dynamic execution patterns were identified. The skill references standard Android development libraries like Hilt and kotlinx.serialization.
- [INDIRECT_PROMPT_INJECTION]: The skill functions as a static reference guide for development. While it ingests user queries about Android development, it does not possess capabilities that could be exploited via data injection. Findings are assessed as safe.
- [COMMAND_EXECUTION]: The skill does not contain shell commands or system-level execution patterns. It provides Kotlin code snippets for instructional purposes only.
Audit Metadata