android-playstore-scan
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the target Android project which could theoretically contain malicious content designed to influence the agent when reading the generated guide.
- Ingestion points:
app/src/main/AndroidManifest.xml,app/src/main/res/values/strings.xml,app/build.gradle.kts, andREADME.md. - Boundary markers: The skill does not employ boundary markers or instructions to ignore potential injections within the scanned project files.
- Capability inventory: The skill utilizes file system read access and standard text processing tools (
grep,sed) to produce a markdown report (PLAY_CONSOLE_SETUP.md). - Sanitization: Extracted values (such as app names or package identifiers) are interpolated into the output without sanitization or validation.
Audit Metadata