android-tooling
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project files such as
build.gradle.ktsanddetekt.ymlto configure linting tools. Malicious instructions embedded in these files could attempt to influence the agent's behavior. - Ingestion points:
build.gradle.kts,detekt.yml, and.detekt/config.yml. - Boundary markers: No specific delimiters or warnings are used to isolate untrusted file content from the agent's instructions.
- Capability inventory: The skill generates and modifies build configuration files and shell scripts.
- Sanitization: No input validation or sanitization is performed on the ingested file content.
Audit Metadata