play-billing-library-version-upgrade
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill parses untrusted application source code and build configuration files to identify deprecated API usage and determine the current library version. This creates a surface where malicious code within a project could attempt to influence the agent's migration logic.
- Ingestion points: Phase 1 and Phase 3 of
SKILL.mdinvolve readingbuild.gradle,build.gradle.kts,libs.versions.toml, and general source code files. - Capability inventory: The skill is capable of executing shell commands via the local Gradle wrapper (
./gradlew). - Boundary markers: No specific delimiters or warnings are used when the agent processes the external source code.
- Sanitization: No explicit sanitization or filtering of the ingested source code is performed before analysis.
- [COMMAND_EXECUTION]: The skill uses the project's local Gradle wrapper to perform build synchronization, compilation, and testing to ensure the migration is successful.
- Evidence:
SKILL.mdcontains instructions to run./gradlew assembleDebug,./gradlew test,./gradlew clean,./gradlew sync, and./gradlew buildduring various phases of the upgrade.
Audit Metadata