buildkonfig-secrets-flavors
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The instructions describe standard build configuration for Kotlin Multiplatform projects using the BuildKonfig plugin. The patterns provided represent industry best practices for handling secrets locally without committing them to source control.\n- [DATA_EXFILTRATION]: While the skill involves handling API keys and secrets, it specifically instructs the user to store them in a git-ignored 'local.properties' file, preventing accidental data exposure. The provided verification commands (e.g., git grep for keys) further assist in preventing credential leakage.\n- [COMMAND_EXECUTION]: The skill includes shell commands for auditing the repository state such as 'git check-ignore' and 'git ls-files'. These commands are local, diagnostic in nature, and do not involve executing remote scripts or downloading untrusted content.
Audit Metadata