kotlin-platform-kmp-bridges
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious patterns, such as prompt injection, persistence mechanisms, or unauthorized privilege escalation, were detected in the skill content or metadata.
- [EXTERNAL_DOWNLOADS]: The skill provides links to official Kotlin documentation on
kotlinlang.orgfor reference purposes. These are established, trusted resources. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project code through file inspection tools, creating a surface for potential indirect prompt injection. The impact is assessed as safe because the skill has no write or network capabilities to act on malicious instructions.
- Ingestion points: Files read by the agent using
Read,Grep, andGlobtools. - Boundary markers: None.
- Capability inventory: Limited to read-only file access.
- Sanitization: Not applicable for this read-only workflow.
Audit Metadata