android-device-integrity
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides comprehensive and accurate documentation for implementing the Android Play Integrity API, correctly noting the deprecation of SafetyNet and adhering to modern security principles such as server-side token verification and request binding.
- [EXTERNAL_DOWNLOADS]: The skill references official and well-known Google Play Integrity and Kotlin coroutines libraries (com.google.android.play:integrity and kotlinx-coroutines-play-services) for Android development.
- [COMMAND_EXECUTION]: The provided Kotlin source code includes standard heuristics for root detection, such as checking for the 'su' binary using Runtime.exec. These checks are clearly documented as auxiliary defense-in-depth measures rather than primary security controls.
Audit Metadata