No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by maxrave-dev · Agent Tool · ★ 495
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is kotlin-footguns safe to install? View the security audit →
kotlin-footguns By maxrave-dev — creator and maintainer of SimpMusic, the 10.8k-star cross-platform music app every lesson in this repository was mined from. 224 battle-tested agent skills mapping the footguns of Kotlin, Compose Multiplatform and desktop JVM development. Mined from a production codebase, not written from documentation. Each skill is a standalone in the open agent-skills format, readable by Claude Code and any coding agent that understands the format — and
| Stars | 495 |
| Forks | 6 |
| Category | Agent Tool |
| License | GPL-3.0 |
| Quality Score | 63.618623480951/100 |
| Last Updated | 2026-08-29 |
| Created | 2026-08-20 |
| Platforms | claude-code |
| Est. Tokens | ~18k |
These tools work well together with kotlin-footguns for enhanced workflows:
Looking for a kotlin-footguns alternative? If you're comparing kotlin-footguns with other agent tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
AI agent skill for Jetpack Compose & Compose Multiplatform (KMP/CMP). MVI architecture, Navigation 3, Koin/Hil
Helping the Agents Compose the Things
Fantasy Premier League Kotlin/Compose Multiplatform sample
Jetpack Compose Agent Skill — AI-powered coding guidance with actual androidx/androidx source code receipts. W
⚡️ A curated library of Agent Skills focused on Jetpack Compose performance.
Creative coding skills for Claude Code, claude.ai and Cowork. Motion, micro-interactions and design systems ac
Explore other popular agent tool tools:
kotlin-footguns is Battle-tested agent skills mapping the footguns of Kotlin, Compose Multiplatform and the desktop JVM — mined from a production music app, not from documentation.. It is categorized as a Agent Tool with 495 GitHub stars.
You can find installation instructions and usage details in the kotlin-footguns GitHub repository at github.com/maxrave-dev/kotlin-footguns. The project has 495 stars and 6 forks, indicating an active community.
kotlin-footguns is released under the GPL-3.0 license, making it free to use and modify according to the license terms.
The top alternatives to kotlin-footguns on Agent Skills Hub include compose-skill, compose-ai-tools, FantasyPremierLeague. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: