dependency-manager
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust set of protocols for dependency management, including mandatory compatibility checks for Android Gradle Plugin (AGP), JDK, and Gradle versions before any update.
- [SAFE]: It promotes secure development practices by prohibiting manual parsing of secret files and instead requiring the use of the well-known Google
secrets-gradle-pluginfor handling API keys and credentials. - [SAFE]: The 'Fail-and-Revert' and 'Atomic Update' protocols ensure that the development environment remains in a stable state and prevents the introduction of unverified or broken dependency chains.
- [SAFE]: The instructions include an 'Anti-Hallucination Policy' that forces the agent to verify version numbers through official documentation or user input rather than guessing, which mitigates the risk of introducing malicious or non-existent packages.
Audit Metadata