mobile-android

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches Couchbase Lite dependencies from the vendor's dedicated development Maven repository (mobile.maven.couchbase.com) and standard public registries (Maven Central, Google). This is the expected and legitimate way to integrate this library into Android applications.
  • [CREDENTIALS_UNSAFE]: Recommends secure practices for handling credentials. Examples demonstrate reading replication credentials at runtime from secure Android storage mechanisms like EncryptedSharedPreferences rather than hardcoding sensitive information.
  • [COMMAND_EXECUTION]: Provides standard Kotlin and Java code for database initialization, CRUD operations, and replication setup. No suspicious shell commands or privilege escalation attempts were detected.
  • [DATA_EXFILTRATION]: Network operations are restricted to the primary purpose of the skill: replicating data to Sync Gateway or Capella App Services. These connections use standard protocols and are configured with authentication.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 09:28 AM
Security Audit — agent-trust-hub — mobile-android