add-android-quick-actions
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
expo-quick-actionslibrary, pointing to a reputable community repository (github.com/EvanBacon/expo-quick-actions). It explicitly instructs the agent to use the project's standard package manager and avoid remote installers or global changes. - [INDIRECT_PROMPT_INJECTION]: The skill correctly identifies that app shortcut payloads should be treated as external input. It provides a secure implementation pattern using a static route resolver to prevent navigation to arbitrary paths or URLs supplied by external triggers.
- [DATA_EXPOSURE]: The instructions include a specific warning against placing tokens, personal data, or sensitive record names in launcher-visible labels or payloads, mitigating potential data leakage to the mobile OS UI.
Audit Metadata