jetpack-compose-performance
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: A detailed audit of the skill instructions and documentation confirmed that all content is focused on legitimate Android UI optimization. No malicious patterns, such as credential harvesting, exfiltration, or persistence mechanisms, were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to analyze and refactor user-provided Jetpack Compose code. While this creates an ingestion point for potentially untrusted data, the skill does not grant the agent capabilities that could be exploited (e.g., shell access, network requests, or file-system modifications) and does not suggest bypassing safety filters.
- Ingestion points: User-provided @Composable functions and UI data models analyzed in SKILL.md.
- Boundary markers: Relies on standard agent-platform delimiters.
- Capability inventory: The skill contains no instructions for network operations, file-system writes, or subprocess execution.
- Sanitization: The skill does not explicitly define sanitization routines as it is a set of static guidelines.
Audit Metadata