xml-to-compose-migration
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: Analysis of the skill instructions and templates did not reveal any malicious patterns, obfuscation, or unauthorized data access.
- [COMMAND_EXECUTION]: The skill incorporates standard Android development commands via the local Gradle wrapper (./gradlew assembleDebug, ./gradlew test, ./gradlew connectedDebugAndroidTest) for validating the migration.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection through its ingestion of local source code files.
- Ingestion points: The skill reads res/layout/*.xml, Fragment.kt, Activity.kt, and various theme resource files.
- Boundary markers: None are present; the instructions do not include specific delimiters or warnings to ignore data-embedded instructions in source files.
- Capability inventory: The skill has the capability to modify project files and execute build commands via the Gradle wrapper.
- Sanitization: There is no evidence of sanitization or validation of the ingested source file content.
Audit Metadata