mobile-android
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches Couchbase Lite dependencies from the vendor's dedicated development Maven repository (
mobile.maven.couchbase.com) and standard public registries (Maven Central, Google). This is the expected and legitimate way to integrate this library into Android applications. - [CREDENTIALS_UNSAFE]: Recommends secure practices for handling credentials. Examples demonstrate reading replication credentials at runtime from secure Android storage mechanisms like
EncryptedSharedPreferencesrather than hardcoding sensitive information. - [COMMAND_EXECUTION]: Provides standard Kotlin and Java code for database initialization, CRUD operations, and replication setup. No suspicious shell commands or privilege escalation attempts were detected.
- [DATA_EXFILTRATION]: Network operations are restricted to the primary purpose of the skill: replicating data to Sync Gateway or Capella App Services. These connections use standard protocols and are configured with authentication.
Audit Metadata