enforcing-stability-in-ci
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends the integration of the
com.github.skydoves.compose.stability.analyzerGradle plugin and thej-roskopf/ComposeGuardplugin from their respective GitHub repositories. These are specialized tools for monitoring Android performance metrics. - [COMMAND_EXECUTION]: Instructs the use of standard Gradle CLI tasks like
./gradlew stabilityCheckand./gradlew stabilityDumpfor managing build performance baselines. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data through Compose compiler reports. 1. Ingestion points: Compose compiler reports in
app/build/reports/stability/. 2. Boundary markers: Not explicitly specified in the instructions. 3. Capability inventory: The skill is restricted to file system operations and build validation tasks. 4. Sanitization: No specific sanitization mentioned, but the data flow is confined to standard build reporting and validation.
Audit Metadata