datastore-kmp-manager
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides bash commands using
grepto help developers verify the structural integrity and implementation details of their Kotlin Multiplatform code. These commands are diagnostic and operate on local source files within the project environment. - [DATA_EXFILTRATION]: The documentation specifies file system paths for local preference storage, including hidden directories in the user's home folder (e.g.,
.yourapp). This follows standard platform conventions for application data persistence and does not involve unauthorized external transmission. - [INDIRECT_PROMPT_INJECTION]: The skill implements a preference storage mechanism that persists data from the application. 1. Ingestion points:
settingsDataStore.editandsettingsDataStore.datacalls inSKILL.md. 2. Boundary markers: None. 3. Capability inventory: Local file system read/write via Jetpack DataStore. 4. Sanitization: None specified. This implementation follows standard architectural patterns and does not present a high risk in its intended context.
Audit Metadata