ac-workflow
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate logic for managing task lifecycles (feat, fix, refactor, etc.) and state management within an Android repository context.
- [COMMAND_EXECUTION]: The instructions reference the use of
gradlewfor consistency checks and builds. This is a standard and expected tool for Android development and is not used for unauthorized code execution. - [DATA_EXPOSURE]: The skill reads and writes task metadata to
.agents/state/INDEX.mdand.agents/state/tasks/. This data access is restricted to the local project environment and is necessary for its task-tracking functionality. - [PROMPT_INJECTION]: The skill processes task titles and summaries which could potentially contain indirect prompt injections. However, the instructions emphasize resolving task context and requiring user confirmation for ambiguous tasks, which helps mitigate accidental execution of malicious instructions in task names.
Audit Metadata