android-dev
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides architectural guidance and best practices for Android development without including any malicious instructions or executable scripts.
- [CREDENTIALS_SAFE]: The instructions explicitly promote secure secret management, advising developers to use platform-backed secure storage (e.g.,
react-native-keychain,expo-secure-store, or Android Keystore) rather than insecure storage for authentication tokens. - [COMMAND_EXECUTION]: No dangerous shell commands or dynamic context injections were detected. Shell commands mentioned (such as
npx cap syncor./gradlew bundleRelease) are standard development tasks intended for the user to run in a controlled build environment. - [REMOTE_CODE_EXECUTION]: All referenced libraries and dependencies are standard, well-known packages from official and trusted registries (Google Maven, Maven Central, npm, and pub.dev).
- [DATA_EXFILTRATION]: There are no patterns suggesting data exfiltration. Network usage mentioned in the code snippets is limited to standard API communication (Retrofit, Ktor, Axios) with appropriate use of interceptors for authentication.
Audit Metadata