mobile-session-security
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides legitimate Kotlin and Swift implementation code for handling UI events (
dispatchTouchEvent,sendEvent) and biometric prompts. All code follows standard mobile development paradigms and does not execute unauthorized system commands. - [EXTERNAL_DOWNLOADS]: The skill references standard, well-known mobile development libraries like
androidx.lifecycle:lifecycle-processandandroidx.biometric:biometric. There are no instructions for downloading remote scripts or executing unverified third-party binaries. - [REMOTE_CODE_EXECUTION]: No patterns for dynamic code loading, runtime compilation, or remote script execution were found.
- [DATA_EXFILTRATION]: The skill focuses entirely on local session state management and screen protection. It does not include any network operations (
curl,fetch, etc.) or logic that would allow for data exfiltration. - [CREDENTIALS_SAFE]: No hardcoded credentials or secrets were detected. The skill correctly identifies the need for secure storage and refers to platform-specific secure enclaves (Keychain/Keystore) for handling sensitive material.
Audit Metadata