android-dev
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves exclusively as an instructional and architectural resource for mobile developers. It contains no executable scripts, automated tools, or hidden logic that could compromise the agent's execution environment.
- [SAFE]: The instructions explicitly advocate for industry-standard security practices. For example, the React Native and Hybrid references direct developers to use platform-backed secure storage (e.g., react-native-keychain, expo-secure-store, or Keystore-backed plugins) rather than insecure persistent storage for sensitive authentication tokens.
- [SAFE]: The skill promotes robust input handling and defensive programming by recommending runtime schema validation (e.g., using Zod) for all external API responses, which helps prevent indirect injection attacks and schema confusion.
- [SAFE]: All library and tool references point to well-known, industry-standard packages from official registries. No suspicious dependencies or unverified remote execution patterns were identified.
Audit Metadata