kmp-analytics
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides instructional code for building an analytics abstraction layer in Kotlin Multiplatform projects, promoting architectural best practices like dependency injection and interface-based design.- [EXTERNAL_DOWNLOADS]: Implementation guidelines reference the official Google Firebase Analytics SDKs for Android and iOS. Google Firebase is a well-known and trusted service.- [DATA_EXFILTRATION]: The skill facilitates standard telemetry and event tracking to the user's configured Firebase backend. It demonstrates logging application events (e.g., login, purchase, button taps) and user properties. No unauthorized access to sensitive system files or exfiltration to untrusted domains was detected.- [SAFE]: Indirect prompt injection assessment:
- Ingestion points: Application route strings from the navigation controller are used for screen tracking in SKILL.md.
- Boundary markers: None present in the example code.
- Capability inventory: The skill is limited to logging telemetry via the Analytics interface; it lacks file system write access or arbitrary command execution capabilities.
- Sanitization: No explicit sanitization of event names or parameters is demonstrated, which is consistent with standard analytics implementation patterns.
Audit Metadata