kotlin-specialist
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and code templates for Kotlin development across Android, KMP, and Ktor environments. No security violations were identified during the analysis of the core instructions or the reference materials.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and generate Kotlin source code, which is a standard surface for code-oriented agents. It includes instructions to run development tools like
detektandktlintto validate code quality. - Ingestion points: The skill ingests Kotlin source code, Gradle configurations, and architecture designs (SKILL.md, Core Workflow).
- Boundary markers: None explicitly defined in the prompts, though the agent's native system instructions typically manage code/data boundaries.
- Capability inventory: The skill workflow involves code analysis, implementation, and running external linting tools (
detekt,ktlint). - Sanitization: The skill does not explicitly describe sanitization methods, relying on standard development tool behaviors.
- [DATA_EXPOSURE]: Code examples correctly use environment variables and configuration properties for sensitive data, such as JWT secrets and database credentials, rather than hardcoding them (references/ktor-server.md, references/dsl-idioms.md).
Audit Metadata