developer-mobile-engineer
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or dangerous command execution were detected in the skill instructions.
- [SAFE]: The skill provides proactive security guidance, specifically forbidding the hardcoding of secrets in binaries and mandating the use of secure storage (Keychain/Keystore) and HTTPS for network operations.
- [PROMPT_INJECTION]: The skill defines an attack surface for indirect prompt injection as it processes external inputs (Scrum tickets, Backlog items, and PRDs) to generate code and configuration files.
- Ingestion points: Scrum Backlog / Tickets and Product Requirement Document (PRD) mentioned in the Inputs section of SKILL.md.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within these external inputs.
- Capability inventory: The skill is designed to generate mobile source code, project directory structures, and platform-specific configuration files (e.g., AndroidManifest.xml, Info.plist).
- Sanitization: No input validation or sanitization processes are specified for the ingested documentation.
Audit Metadata