android-compose-migration
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill facilitates a standard developer task of migrating legacy Android UI components to the modern Jetpack Compose framework. All external dependencies referenced in references/dependency-setup.md belong to the official androidx.compose and com.google.android.material namespaces, which are trusted sources.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted layout and source code files, which constitutes a potential attack surface. 1. Ingestion points: layout/*.xml and Kotlin source files listed in triggers. 2. Boundary markers: The skill defines a structured 10-step workflow to guide agent behavior. 3. Capability inventory: Modification of source code and project configuration files (build.gradle.kts, libs.versions.toml). 4. Sanitization: The workflow includes manual verification steps and visual parity checks to ensure safe output generation.
Audit Metadata