maui-device-capabilities
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFE
Full Analysis
- [Secure Permission Lifecycle Management]: The skill correctly identifies the need for both platform-level declarations (manifests/plists) and runtime permission checks. It advocates for asking for permissions at the moment of need and providing clear fallback paths, which helps prevent over-privileged applications and improves transparency.
- [Principle of Least Privilege]: The guidance explicitly instructs developers to use the narrowest possible permission scopes (e.g., granular media access in Android 13+) and to avoid adding declarations 'just in case,' which is a fundamental security best practice.
- [Robust Data Handling]: The inclusion of guardrails for file pickers and sensors—such as handling null results, managing stale location data, and copying file streams for durable access—helps ensure that the application handles device data reliably and prevents common implementation errors that could lead to crashes or data loss.
- [Authorized API Mapping]: The capability-to-permission mapping provided for Android and iOS aligns with official platform documentation for standard device services like GPS, camera, and file storage.
Audit Metadata