mobile-deep-linking-app-links
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access attempts were detected in the skill instructions or examples.
- [DATA_EXFILTRATION]: The documentation includes high-priority security guidance warning developers never to pass sensitive information such as authentication tokens, passwords, or PII in deep link URLs because they are logged in analytics and cached in browser history.
- [PROMPT_INJECTION]: The skill proactively addresses indirect prompt injection risks by including a 'URL Validation and Sanitization' pattern. This pattern teaches the use of allowlists for valid paths, parameter length limits, and character stripping to sanitize external input before it is processed by the application's navigation logic.
Audit Metadata