android-studio

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill is a standard instructional guide for Android development, providing command-line examples for Gradle and ADB which are appropriate for its stated purpose.
  • [DATA_EXPOSURE]: The skill demonstrates safe credential management practices by explicitly instructing users to keep keystore paths and passwords out of version control and recommending the use of environment variables or local properties files.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies ingestion points for untrusted data, specifically Gradle configuration files and Logcat output.
  • Ingestion points: Gradle build scripts (build.gradle.kts) and system logs (Logcat).
  • Boundary markers: None explicitly defined in the provided text.
  • Capability inventory: The skill uses Gradle wrapper (./gradlew) for builds and tests, and the Android Debug Bridge (adb) for log retrieval.
  • Sanitization: Not applicable as the skill provides high-level guidance rather than automated processing scripts. The risk is considered minimal and inherent to the development process.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 09:13 PM