kotlin-multiplatform
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The scripts
suggest-kmp-dependency.shandvalidate-kmp-structure.shuse standard Unix utilities likegrep,find,awk, andsedto analyze Kotlin source files and Gradle configurations. These operations are restricted to the local project directory and do not involve shell injection or dangerous command execution. - [DATA_EXFILTRATION] (SAFE): No network operations, hardcoded credentials, or access to sensitive system paths (e.g., SSH keys, environment files) were found. The scripts only read local project metadata.
- [REMOTE_CODE_EXECUTION] (SAFE): There are no instances of remote script downloads or piped execution (e.g.,
curl | bash). All scripts are self-contained and perform static analysis. - [PROMPT_INJECTION] (SAFE): The markdown files are purely technical documentation and guides. They contain no instructions intended to override agent behavior or bypass safety filters.
Audit Metadata