android-proguard-setup
Fail
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: HIGH
Full Analysis
- [PROMPT_INJECTION] (SAFE): No patterns found that attempt to override agent instructions or bypass safety filters. Instructional language is consistent with the skill's stated purpose.- [DATA_EXFILTRATION] (SAFE): No network requests (curl, wget, fetch) or access to sensitive local credentials (SSH, AWS keys) were detected. The skill only interacts with standard Android project files.- [COMMAND_EXECUTION] (SAFE): The shell commands used (cat, grep, test) are restricted to creating and verifying local configuration files and do not use untrusted input for command construction.- [INDIRECT_PROMPT_INJECTION] (LOW): The skill has an attack surface in Category 8 as it reads existing build files to determine configuration state. However, since it is a developer tool intended for local project maintenance, the risk is deemed low. Mandatory Evidence: (1) Ingestion: Reads 'app/build.gradle.kts' via grep. (2) Boundary: None. (3) Capability: File write/append and shell execution. (4) Sanitization: None detected.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata