appwrite-kotlin
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes official, well-known SDKs for Android and Kotlin (
io.appwrite:sdk-for-androidandio.appwrite:sdk-for-kotlin) from the vendor's official repositories. - [SAFE]: Demonstrates secure credential management by instructing users to retrieve sensitive API keys and project IDs from environment variables (
System.getenv) rather than hardcoding them. - [SAFE]: Provides proactive security guidance for Server-Side Rendering (SSR), including the use of
httpOnly,secure, andSameSite=Strictcookie flags to prevent Cross-Site Scripting (XSS) and session hijacking. - [SAFE]: Includes a dedicated 'Permissions & Roles' section that warns against common misconfigurations, such as granting excessive privileges (
Role.any()) to sensitive data or forgetting to set permissions entirely. - [SAFE]: No obfuscation, unauthorized network exfiltration, or malicious instruction patterns were detected in the skill body or metadata.
Audit Metadata