mobile-widgets
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard architectural patterns and templates for mobile widget development. No evidence of prompt injection or data exfiltration was found.
- [SAFE]: Provided code snippets for Android use
PendingIntent.FLAG_IMMUTABLE, which is a security best practice to prevent intent hijacking and privilege escalation. - [SAFE]: Networking practices in the templates use
URLSessionand KtorHttpClientwith appropriate caching and timeout configurations, following best practices for limited resource environments. - [SAFE]: Several reference files (e.g., architecture-patterns.md, security-best-practices.md) contain 150 sections each of repetitive technical filler. A detailed audit of these cycles revealed no hidden malicious commands, obfuscated URLs, or secondary payloads.
Audit Metadata