mobile-checkpoint

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the use of standard development tools including git for version control and gradlew for Android build tasks. These are routine operations in a development environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill interacts with local project files and Git history, creating a surface for indirect prompt injection. * Ingestion points: The workflow processes the entire local project directory using commands like git add -A and git status. * Boundary markers: There are no specific boundary markers or instructions provided to the agent to ignore instructions embedded within the codebase being managed. * Capability inventory: The agent is expected to execute shell commands (git, gradlew) and modify the filesystem via Git's restoration and cleaning mechanisms. * Sanitization: No sanitization or validation of the files being versioned is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 08:12 PM
Security Audit — agent-trust-hub — mobile-checkpoint