jna-native-binding-traps
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and best practices for JNA bindings. The provided Kotlin code snippets demonstrate safe memory management (using Pointers instead of Strings for owned buffers) and lifecycle management (keeping references to callbacks to prevent garbage collection).
- [COMMAND_EXECUTION]: The verification section includes shell commands using
find,javap,grep, andawk. These commands are used locally to inspect the bytecode of a pinned JNA JAR file and verify implementation details of the library. They do not perform network operations or access sensitive system files beyond the local developer environment (Gradle caches). - [DATA_EXPOSURE]: The skill suggests logging the absolute path of a loaded library (
NativeLibrary.getInstance(name).file?.absolutePath). This is a diagnostic practice to ensure the correct library version is loaded and does not constitute sensitive data exfiltration.
Audit Metadata