kuikly-visibility-exposure
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation, API references, and code examples for UI development tasks such as exposure reporting and visibility tracking. All identified patterns align with standard software development practices.
- [DATA_EXPOSURE]: While the skill mentions 'exposure reporting' (analytics tracking), this is described in the context of triggering events within a UI framework. There is no evidence of unauthorized sensitive data access, credential harvesting, or exfiltration to untrusted domains.
- [REMOTE_CODE_EXECUTION]: No remote script downloads, piped executions (e.g., curl|bash), or untrusted package installations were found. The code examples use internal framework libraries (com.tencent.kuikly.*) consistent with the vendor.
- [COMMAND_EXECUTION]: The skill does not contain any shell commands, subprocess calls, or privilege escalation attempts.
- [PROMPT_INJECTION]: No instructions were found that attempt to override agent safety guidelines, bypass constraints, or extract system prompts.
Audit Metadata