deep-link-architect

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate architectural guidance for mobile application development. It focuses on configuring standard platform features like apple-app-site-association and assetlinks.json.
  • [CREDENTIALS_UNSAFE]: The examples and instructions correctly use placeholders for sensitive identifiers, such as YOUR_APP_SHA256_FINGERPRINT and TEAMID, ensuring that users are prompted to provide their own values rather than using hardcoded secrets.
  • [COMMAND_EXECUTION]: The skill includes instructions for testing deep links using standard mobile development tools (xcrun for iOS and adb for Android). These commands are used for their intended purpose in a local development environment and do not pose a security risk in this context.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a template generator, incorporating user-provided domains and paths into configuration snippets. While this involves processing untrusted data, the output is restricted to standard JSON/XML configuration blocks with no executable capabilities, and the instructions maintain clear boundaries for generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 10:51 PM