kotlin-tooling-agp9-migration
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of technical documentation and reference guides for migrating Gradle build configurations. The instructions are aligned with standard Android and Kotlin development practices for the AGP 9.0 release.
- [COMMAND_EXECUTION]: The skill includes a shell script,
scripts/analyze-project.sh, which performs a local audit of the project structure. The script uses benign Unix utilities (find,grep,sed) to detect installed plugins and source layouts. It does not perform network operations, file modifications, or privilege escalation. - [EXTERNAL_DOWNLOADS]: The documentation references official distribution services such as
services.gradle.orgfor the Gradle wrapper. These are well-known and trusted infrastructure components for the intended development workflow. - [DATA_EXPOSURE]: The skill instructs the agent to read project configuration files (
build.gradle.kts,settings.gradle.kts,gradle.properties) to determine the migration path. This access is restricted to standard project metadata required for the skill's primary purpose and does not involve accessing sensitive user credentials or system secrets.
Audit Metadata