android-networking
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits a vulnerability surface for indirect prompt injection by ingesting untrusted data from the user's project files.
- Ingestion points: The skill triggers on and processes content from files matching
**/*Api.kt,**/*Service.kt, and**/*Client.ktas defined in the metadata ofSKILL.md. - Boundary markers: The instructions do not define explicit delimiters or instructions to ignore embedded prompts within the files being analyzed.
- Capability inventory: The skill facilitates code generation, modification, and architectural guidance for network-related components within an Android application.
- Sanitization: There are no documented mechanisms for sanitizing or filtering instructions that might be embedded within the project files (e.g., in code comments).
Audit Metadata