restore-credentials
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill outlines the implementation of the Android Credential Manager API (
androidx.credentials) for silent sign-in restoration. The instructions focus on client-side logic and provide clear warnings regarding the necessity of secure server-side implementation. - [SAFE]: Includes security best practices such as mandatory calls to
clearCredentialStateupon user logout to prevent unauthorized credential persistence. - [EXTERNAL_DOWNLOADS]: References official Android Jetpack libraries and documentation from well-known trusted organizations (Google, W3C, MDN). These are standard development resources and do not represent a security risk.
- [COMMAND_EXECUTION]: Documents standard manual commands (e.g.,
keytool) for developers to generate certificate fingerprints required for app origin verification, which is a routine and safe administrative task.
Audit Metadata