diagnosing-compose-stability
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for running standard Gradle build tasks (e.g.,
./gradlew :app:assembleRelease -PcomposeCompilerReports=true) to generate performance metrics. These commands are typical for Android development workflows. - [EXTERNAL_DOWNLOADS]: Includes links to official Google Android documentation, reputable community blogs (Medium, Chris Banes), and the author's public GitHub repository for a stability analysis tool. These references are used for educational purposes and tool integration within the author's ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where the agent reads and interprets local text-based build artifacts (
classes.txt,composables.txt). While this is an ingestion of external data into the agent's context, the files are generated locally by the compiler, presenting a negligible security risk in this specific use case.
Audit Metadata