smart-glasses-rokid
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for developers using the Rokid CXR-L SDK. It provides well-documented Kotlin and Swift code snippets for session management, display updates, and audio streaming.
- [EXTERNAL_DOWNLOADS]: References official and well-known sources for dependencies, including the Rokid Maven repository (
maven.rokid.com) and CocoaPods trunk. It correctly instructs developers to useexclusiveContentfilters in Gradle to limit the scope of external repositories, which is a security best practice for dependency management. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill does not access sensitive user files or credentials. Network operations described are limited to standard SDK authentication flows and data streaming between the phone app and the glasses via the official companion app (Hi Rokid).
- [INDIRECT_PROMPT_INJECTION]: While the skill involves processing external data (microphone input and text displays), it includes logic for sanitizing and cleaning input strings (e.g.,
TextCard.clean()) to prevent common layout or escaping issues. - [COMMAND_EXECUTION]: No suspicious shell command execution or arbitrary code execution patterns were detected. The code snippets provided are static templates for application development.
Audit Metadata