google-mobile-ads-android-migrate-to-next-gen

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • External Data Fetch: The skill provides a command to fetch version metadata from an official repository (dl.google.com) using curl. This is a standard procedure to ensure the migration uses the most recent SDK version and targets a trusted domain.
  • Indirect Prompt Injection Surface: The migration process involves analyzing and refactoring existing Android codebase content. While this creates a surface where the agent processes external data, the skill uses structured mapping tables to guide the agent's behavior, which acts as a framework for the migration tasks.
  • Ingestion points: Android application codebase and build files.
  • Boundary markers: None explicitly defined for code ingestion.
  • Capability inventory: The skill provides instructions for code refactoring and Gradle configuration updates; it does not invoke arbitrary command execution on the ingested code.
  • Sanitization: Standard LLM processing of code structure.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 07:34 PM
Security Audit — agent-trust-hub — google-mobile-ads-android-migrate-to-next-gen