engineering-mobile-app-builder
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/check_app_size.shutilizes standard system utilities includingdu,find,wc,awk, andbcto calculate build output sizes and categorize assets. These operations are restricted to the local filesystem and serve a legitimate development purpose. - [INDIRECT_PROMPT_INJECTION]: The utility
scripts/check_permissions.pyprocessesAndroidManifest.xmlandInfo.plistfiles using standard Python libraries. This represents a data ingestion surface for untrusted project files; however, the script only extracts and audits permission tags without executing content, presenting a low risk to the execution environment. - [SAFE]: The skill incorporates industry-standard security practices for mobile platforms, such as utilizing Keychain and EncryptedSharedPreferences for sensitive data, implementing biometric authentication with proper fallback mechanisms, and explicitly excluding monetary transaction logic from its functional scope.
Audit Metadata