kotlin-project-state-management
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily educational documentation and does not contain any executable scripts, command line invocations, or data exfiltration patterns.
- [INDIRECT_PROMPT_INJECTION]: As a code review tool, the skill is designed to ingest and process user-provided Kotlin code. While this creates a vulnerability surface for indirect prompt injection, the skill lacks the capabilities (like shell access or network tools) required to exploit such an injection. 1. Ingestion points: User-supplied code blocks and architecture definitions (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: None. 4. Sanitization: None.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation from trusted organizations like Google (Android) and JetBrains (Kotlin). These references are documented neutrally and are used for developer reference.
Audit Metadata