deep-link-architect
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate architectural guidance for mobile application development. It focuses on configuring standard platform features like
apple-app-site-associationandassetlinks.json. - [CREDENTIALS_UNSAFE]: The examples and instructions correctly use placeholders for sensitive identifiers, such as
YOUR_APP_SHA256_FINGERPRINTandTEAMID, ensuring that users are prompted to provide their own values rather than using hardcoded secrets. - [COMMAND_EXECUTION]: The skill includes instructions for testing deep links using standard mobile development tools (
xcrunfor iOS andadbfor Android). These commands are used for their intended purpose in a local development environment and do not pose a security risk in this context. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a template generator, incorporating user-provided domains and paths into configuration snippets. While this involves processing untrusted data, the output is restricted to standard JSON/XML configuration blocks with no executable capabilities, and the instructions maintain clear boundaries for generation.
Audit Metadata