mobile-android-design
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes standard UI templates that display data from external sources, representing a common ingestion surface in mobile applications.
- Ingestion points: UI components like
AsyncImage(SKILL.md) and navigation route parameters (references/android-navigation.md) are designed to process and display externally provided strings and URLs. - Boundary markers: No explicit prompt delimiters or safety instructions are included in the code snippets, as they are focused on design implementation.
- Capability inventory: The skill provides Kotlin code for mobile UI development and does not contain any capabilities for host-level command execution, network exfiltration, or local file access.
- Sanitization: The provided snippets serve as design references and do not demonstrate input sanitization, which is expected to be implemented by the developer in a production context.
- [EXTERNAL_DOWNLOADS]: The skill references official Android and Material Design resources from trusted sources and uses standard, well-known development libraries.
- Official links target
m3.material.io,developer.android.com, and theandroid/compose-samplesrepository on GitHub. - It mentions standard Android dependencies such as
androidx.navigation:navigation-composefor implementation purposes.
Audit Metadata