kotlin-binary-compatibility
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes project-specific files that could contain adversarial instructions intended to manipulate the agent's behavior during ABI validation and review tasks.\n
- Ingestion points: The agent is directed to read and parse several file types within the project repository, including Kotlin ABI dump files (.api, .abi), Gradle build scripts (build.gradle, build.gradle.kts), and version catalogs (libs.versions.toml).\n
- Boundary markers: The skill does not define specific delimiters or instructions for the agent to isolate and ignore potentially malicious content embedded within these data sources.\n
- Capability inventory: The skill has the capability to execute a bundled Python analysis script (scripts/inspect-project.py) and perform broad read operations on the local file system.\n
- Sanitization: No evidence of content sanitization or structured validation of the external project data was found in the provided instructions or scripts.
Audit Metadata