android-deployment
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions and examples for Android build configurations that adhere to security best practices.
- [DATA_EXFILTRATION]: No hardcoded credentials or sensitive file paths were detected. The skill explicitly advises against committing keystores and suggests using environment variables (System.getenv) for passwords, which is a secure implementation for CI/CD environments.
- [PROMPT_INJECTION]: No malicious instructions or attempts to override agent safety guidelines were identified in the metadata or instructional content.
- [INDIRECT_PROMPT_INJECTION]: The skill operates on build configuration files.
- Ingestion points: build.gradle.kts, proguard-rules.pro.
- Boundary markers: Not applicable for these instructions.
- Capability inventory: None (no network operations, subprocess calls, or file writes are performed by the skill itself).
- Sanitization: The skill provides static templates for configuration and does not dynamically execute untrusted data.
Audit Metadata