add-android-pip

Pass

Audited by Gen Agent Trust Hub on Aug 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the react-native-picture-in-picture package via pnpm. This is a specific community-maintained library used to bridge native Android PiP functionality to React Native, which aligns with the skill's primary purpose.
  • [SAFE]: No malicious patterns were identified. The suggested modifications to app.json and AndroidManifest.xml (such as setting android:supportsPictureInPicture="true") are standard, documented requirements for the feature. No evidence of prompt injection, data exfiltration, or obfuscation was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 5, 2026, 11:17 PM
Security Audit — agent-trust-hub — add-android-pip