mobile-android-design

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill includes standard UI templates that display data from external sources, representing a common ingestion surface in mobile applications.
  • Ingestion points: UI components like AsyncImage (SKILL.md) and navigation route parameters (references/android-navigation.md) are designed to process and display externally provided strings and URLs.
  • Boundary markers: No explicit prompt delimiters or safety instructions are included in the code snippets, as they are focused on design implementation.
  • Capability inventory: The skill provides Kotlin code for mobile UI development and does not contain any capabilities for host-level command execution, network exfiltration, or local file access.
  • Sanitization: The provided snippets serve as design references and do not demonstrate input sanitization, which is expected to be implemented by the developer in a production context.
  • [EXTERNAL_DOWNLOADS]: The skill references official Android and Material Design resources from trusted sources and uses standard, well-known development libraries.
  • Official links target m3.material.io, developer.android.com, and the android/compose-samples repository on GitHub.
  • It mentions standard Android dependencies such as androidx.navigation:navigation-compose for implementation purposes.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 01:01 PM