bmob-database-android
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill identifies necessary dependencies in
app/build.gradle, including the Bmob SDK (io.github.bmob:android-sdk) and supporting libraries like OkHttp, Gson, and RxJava. These are standard artifacts fetched from official Maven repositories and are appropriate for the skill's purpose. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates data ingestion from external Bmob database tables into the agent's operational context.
- Ingestion points: Data is retrieved through
BmobQueryandgetObjectcalls as documented inSKILL.mdandreferences/query.md. - Boundary markers: None provided; the skill follows standard programmatic SDK usage patterns.
- Capability inventory: The skill enables Create, Read, Update, and Delete (CRUD) operations, file uploads/downloads, and batch processing as documented in
references/batch.mdandreferences/pointer-and-relation.md. - Sanitization: Content validation and sanitization are expected to be handled by the developer at the application implementation level.
- [SAFE]: The documentation correctly uses placeholders for sensitive credentials (e.g., "你的Application ID") and includes explicit security warnings to prevent leaking Master Keys in released APKs. It also provides necessary ProGuard rules and AndroidManifest configurations required for secure and functional SDK operation.
Audit Metadata