skills/kotlin/kotlin-agent-skills/kotlin-tooling-gradle-to-kotlin-toolchain-project/Gen Agent Trust Hub
kotlin-tooling-gradle-to-kotlin-toolchain-project
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines various workflows involving shell command execution for building, testing, and releasing projects. Commands include
./kotlin build,./kotlin check, and specialized plugin tasks like./kotlin do jib. It also demonstrates the use of shell utilities likegit,awk, andsedfor version resolution and output parsing. - [EXTERNAL_DOWNLOADS]: Instructions direct the user to obtain the build wrapper and reference plugins from the official JetBrains Kotlin Toolchain repository on GitHub. The skill encourages searching and vendoring existing plugins from GitHub to avoid from-scratch development, which is a standard development practice for this ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill involves reading and processing existing project configuration files such as
build.gradle.kts,libs.versions.toml, and CI workflow definitions. The author explicitly identifies these files as untrusted project input and incorporates warnings to handle them according to established safety protocols for untrusted content.
Audit Metadata