sleek-design-mobile-apps

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses curl and shell redirection (-o) to manage API requests and save responses (JSON, HTML, and images) directly to the file system. This approach is documented as a way to avoid performance bottlenecks and potential string parsing issues in shells like zsh when handling large payloads.- [EXTERNAL_DOWNLOADS]: The skill communicates with the primary domain https://sleek.design for its core operations. It also retrieves SVG assets from https://api.iconify.design and references Google Fonts for typography. These are established services and represent standard external dependencies for a UI/UX design tool.- [SAFE]: The skill demonstrates safe credential management by utilizing the SLEEK_API_KEY environment variable and providing a secure device-based flow for users to authenticate without manual key handling. It also explicitly limits network access to the vendor's domain.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 08:38 AM
Security Audit — agent-trust-hub — sleek-design-mobile-apps