android-intent-security
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides accurate and standard security practices for Android application development, specifically targeting IPC (Inter-Process Communication) security.
- [CREDENTIALS_UNSAFE]: While the skill contains a hardcoded Base64 string in
TRUSTED_PARTNER_SHA256, this is clearly a placeholder example ("A1B2C3D4...") used for educational purposes in the context of signature verification code and does not represent a real secret. - [EXTERNAL_DOWNLOADS]: The skill mentions the
androidx.core:core:1.9.0library, which is a standard, well-known dependency from Google's official AndroidX project. No untrusted or remote code downloads were detected. - [COMMAND_EXECUTION]: The skill contains Kotlin and XML code snippets for Android app components. These are examples for the agent to use when suggesting code fixes; no arbitrary shell command execution or dangerous subprocess patterns were found.
- [DATA_EXFILTRATION]: No network-bound operations or attempts to access sensitive system files (e.g., SSH keys, environment variables) were found. The code focuses on internal Android component communication.
- [PROMPT_INJECTION]: The instructions are clear, instructional, and do not contain patterns designed to bypass safety filters or override the agent's core programming.
Audit Metadata