camerax
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive reference for Android CameraX development. It includes migration guides from Camera1/Camera2, blueprints for complex features like manual controls and RAW capture, and specialized guidance for foldables, Wear OS, and XR devices.
- [INDIRECT_PROMPT_INJECTION]: The skill describes an attack surface involving the ingestion of external camera frame data (ImageProxy) for analysis.
- Ingestion points: Camera frame buffers are accessed in
references/camera1-to-camerax.md,references/camera2-to-camerax.md,references/low-light.md, andreferences/mlkit-spatial.mdviaImageAnalysisandImageCaptureuse cases. - Boundary markers: The instructions describe standard programmatic boundaries within Kotlin code blocks.
- Capability inventory: The documented code utilizes camera hardware access, file system writes (for captured images), and network communication (for Wear OS data syncing).
- Sanitization: The skill promotes the use of standard Android Jetpack libraries and ML Kit APIs which handle data normalization and coordinate mapping.
- [EXTERNAL_DOWNLOADS]: The skill references official Android developer documentation (
developer.android.com) and standard Google Play Services dependencies (com.google.android.gms:play-services-camera-low-light-boost). These are from a well-known and trusted service.
Audit Metadata