compose-expert

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/find-composables.sh uses grep to identify @Composable functions in the codebase. It uses quoted variables to handle paths and restricts searches to Kotlin files, minimizing command injection risks.
  • [INDIRECT_PROMPT_INJECTION]: The skill documents the RichTextParser system in references/rich-text-parsing.md for processing raw content from external Nostr events.
  • Ingestion points: Raw event content is ingested and parsed by RichTextParser.kt.
  • Boundary markers: The system uses a structured segment model (RichTextParserSegments.kt) to delimit different content types.
  • Capability inventory: The skill facilitates UI rendering of parsed content and includes a local search utility.
  • Sanitization: The UrlParser.kt utility provides validation for external URLs before they are processed.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 10:28 PM
Security Audit — agent-trust-hub — compose-expert