appllama-app-design-skill
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
xcrun simctlshell commands (screenshot,recordVideo) within thereferences/simulator-loop.mdandSKILL.mdfiles to verify layout and motion performance in the iOS simulator. - [EXTERNAL_DOWNLOADS]: The instructions recommend installing well-known React Native and Expo packages (e.g.,
react-native-reanimated,expo-router,flash-list) via official registries and mention using external Model Context Protocol (MCP) servers for design references and asset generation. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to pull and analyze external screen data from the Appllama MCP to extract design patterns. This represents a potential surface for indirect prompt injection, though the guidelines specifically advise extracting patterns rather than literal content.
- [SAFE]: The skill adheres to industry-standard mobile development practices and does not contain any obfuscated code, unauthorized data access, or privilege escalation attempts.
Audit Metadata