android-bluetooth-sockets
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate development resource for Android engineers. All referenced materials point to official Android developer documentation and public SDK stubs.
- [COMMAND_EXECUTION]: The skill includes a utility script,
scripts/inspect-project.py, designed to help developers audit their code for Bluetooth-related issues. Analysis of the script confirms it uses standard Python libraries (argparse,re,json,xml) to perform local file scanning. It contains no network capabilities, no dangerous subprocess executions, and no logic to modify system state. - [DATA_EXPOSURE]: There are no hardcoded credentials, API keys, or suspicious file access patterns. The skill focuses on public Android APIs and local source code provided by the user for inspection.
- [INDIRECT_PROMPT_INJECTION]: While the included Python script reads external source code, it serves purely as a regex-based static analyzer. Its output is structured JSON or text meant for developer review, presenting a negligible risk for indirect injection attacks.
Audit Metadata