mobile-checkpoint
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the use of standard development tools including
gitfor version control andgradlewfor Android build tasks. These are routine operations in a development environment. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with local project files and Git history, creating a surface for indirect prompt injection. * Ingestion points: The workflow processes the entire local project directory using commands like
git add -Aandgit status. * Boundary markers: There are no specific boundary markers or instructions provided to the agent to ignore instructions embedded within the codebase being managed. * Capability inventory: The agent is expected to execute shell commands (git,gradlew) and modify the filesystem via Git's restoration and cleaning mechanisms. * Sanitization: No sanitization or validation of the files being versioned is described.
Audit Metadata