camerax

Pass

Audited by Gen Agent Trust Hub on Aug 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a comprehensive reference for Android CameraX development. It includes migration guides from Camera1/Camera2, blueprints for complex features like manual controls and RAW capture, and specialized guidance for foldables, Wear OS, and XR devices.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes an attack surface involving the ingestion of external camera frame data (ImageProxy) for analysis.
  • Ingestion points: Camera frame buffers are accessed in references/camera1-to-camerax.md, references/camera2-to-camerax.md, references/low-light.md, and references/mlkit-spatial.md via ImageAnalysis and ImageCapture use cases.
  • Boundary markers: The instructions describe standard programmatic boundaries within Kotlin code blocks.
  • Capability inventory: The documented code utilizes camera hardware access, file system writes (for captured images), and network communication (for Wear OS data syncing).
  • Sanitization: The skill promotes the use of standard Android Jetpack libraries and ML Kit APIs which handle data normalization and coordinate mapping.
  • [EXTERNAL_DOWNLOADS]: The skill references official Android developer documentation (developer.android.com) and standard Google Play Services dependencies (com.google.android.gms:play-services-camera-low-light-boost). These are from a well-known and trusted service.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 23, 2026, 09:00 PM
Security Audit — agent-trust-hub — camerax