ktor-kmp-client-architecture
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides informational
grepcommand examples designed to assist developers in auditing their codebases for specific Ktor construction and logging patterns. - [SAFE]: The architectural pattern demonstrated uses
expect/actualdeclarations to abstract platform-specific HTTP engines, which is the recommended approach for Kotlin Multiplatform development. - [SAFE]: The example code includes a configuration to allow HTTPS to HTTP downgrades during redirects (
allowHttpsDowngrade = true). While this is a security-sensitive setting, it is presented as part of a technical architectural template for specific KMP networking requirements. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to audit project code by running
grepand interpreting the results. - Ingestion points: The agent reads and analyzes output from
grepcommands targeting*.ktfiles within the workspace. - Boundary markers: No explicit delimiters are used for the code snippets ingested during the audit process.
- Capability inventory: The skill uses local shell command execution (
grep) and internal code analysis capabilities. - Sanitization: No sanitization is performed on the ingested code before analysis.
Audit Metadata