agp9-kotlin-migration
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate instructions and templates for Android build system maintenance. All recommended actions involve standard project files and local build tools.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it is designed to read and modify untrusted project files.
- Ingestion points: The agent is instructed to inspect
build.gradle.kts,settings.gradle.kts,gradle/libs.versions.toml, and CI workflow files as listed inSKILL.md. - Boundary markers: The instructions do not define specific delimiters or warnings for the agent to ignore potentially malicious instructions embedded in these build files.
- Capability inventory: The skill has the capability to modify project files and execute shell commands through the Gradle wrapper (
./gradlew) as defined in the 'Commands to validate' section ofSKILL.md. - Sanitization: There are no explicit sanitization or validation steps for the content of the ingested files.
Audit Metadata