kotlin-power-assert
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Python script (
scripts/inspect-project.py) to analyze project configuration. The script performs static analysis of build files (Gradle/Maven) and source files to identify Power-assert usage without executing external commands or performing network operations.- [EXTERNAL_DOWNLOADS]: The skill references official documentation and source code repositories hosted onkotlinlang.organdgithub.com/JetBrains/kotlin. These are well-known, official sources for the Kotlin ecosystem.- [INDIRECT_PROMPT_INJECTION]: The diagnostic script reads untrusted content from the local project (source code and configuration files). - Ingestion points:
scripts/inspect-project.pyreads local.kt,.gradle,.toml, and.xmlfiles viapathlib.Path.rgloband.read_text(). - Boundary markers: None identified.
- Capability inventory: The script is limited to static file reading and printing metadata to stdout; it lacks subprocess execution, network access, or file-writing capabilities.
- Sanitization: None identified. The risk is negligible as the script does not have exploitable capabilities.
Audit Metadata