aivo-android
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a robust architectural framework for Android AI integration. It follows industry standards for secure development, including:
- Secret Management: Explicitly instructs developers to use
local.propertiesandBuildConfigto manage sensitive API keys, preventing hardcoding in source code. - Human-in-the-Loop (HITL): High-risk operations, such as clearing application cache, are implemented with a mandatory confirmation mechanism (
requiresConfirmation(true)), ensuring users must approve dangerous actions before they are executed by the agent. - Scoped Access: Tools provided as examples (e.g., battery status, device info) access standard Android system APIs within expected app permissions.
- Trusted Dependencies: All referenced artifacts (
io.github.abdallah-elsobky:aivo-sdk) and third-party libraries (Google Gemini, AndroidX, Jetpack Compose) are well-known or originate from the skill author's own verified infrastructure.
Audit Metadata