jetpack-compose-audit
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to perform repository mapping and analysis, including running the project's Gradle wrapper (./gradlew) to generate compiler diagnostics. This is a core part of its auditing functionality. - [SAFE]: The skill uses a local Gradle init script (
scripts/compose-reports.init.gradle) to inject compiler reporting configuration into the build process. The script is designed to safely configure output directories for performance metrics without modifying the user's source code or executing arbitrary remote commands. - [SAFE]: All external references within the skill point to official Android developer documentation or the author's own GitHub repositories, providing legitimate context and evidence for audit findings.
Audit Metadata