android-kotlin

SUSPICIOUS. The Android/Kotlin guidance is largely coherent and benign, but the companion-check section is out of scope: it probes local agent skill directories and encourages installing additional third-party skills via npx. That transitive trust chain is disproportionate to the stated Android purpose and raises medium risk even without direct credential theft or exfiltration.