mobile-dev
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill provides markdown-based architectural guidance and security best practices for mobile application development but does not include any executable scripts, binaries, or automated configuration files.
- [INDIRECT_PROMPT_INJECTION]: The skill operates on user-provided application requirements, which represents a potential surface for indirect prompt injection. The instructions include specific mitigations to address this risk.
- Ingestion points: User-supplied mobile application feature descriptions and requirements in SKILL.md.
- Boundary markers: No explicit delimiters or boundary markers are defined for the interpolation of user data into prompts.
- Capability inventory: The skill itself defines no tools or subprocess capabilities, acting purely as a behavioral modifier for the agent's existing coding tools.
- Sanitization: The instructions specifically mandate the use of authentication session validation and payload sanitization for handling external data such as deep links.
Audit Metadata