kmp-architecture
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to perform analysis on a codebase by searching through files and running build tasks, creating an ingestion surface for potentially malicious data within the target project.
- Ingestion points: The agent is directed to read and search Kotlin and Gradle files across several directories (e.g.,
feature/,commonMain/) usingripgrep(rg) and project-specific paths. - Boundary markers: The instructions lack specific guidance or delimiters to prevent the agent from following instructions that might be embedded in the code it is analyzing.
- Capability inventory: The agent uses shell-based search tools (
rg) and a build system (./gradlew) to interact with the environment, providing paths for potential code execution or system interaction. - Sanitization: There is no requirement in the instructions to sanitize or validate the content of the files being read or the names of the modules being checked.
Audit Metadata