mobile-design

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a set of design guidelines for mobile platforms (iOS and Android) and frameworks (React Native, Flutter). It includes a Python script scripts/mobile_audit.py designed to perform static analysis on mobile project source code.
  • [SAFE]: The scripts/mobile_audit.py script uses regular expressions to identify potential issues such as small touch targets, performance bottlenecks in lists (e.g., using ScrollView instead of FlatList), and insecure storage of authentication tokens in AsyncStorage. The script only reads files and outputs findings to the console, with no network or file-write capabilities.
  • [SAFE]: No obfuscation, hidden instructions, or malicious prompt injection patterns were found in any of the 14 files. The skill uses instructional 'checkpoints' and 'commitments' to ensure the AI agent adheres to mobile design principles rather than relying on memorized defaults.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests project code using Read, Glob, and Grep tools and provides an execution environment via Bash. However, this is consistent with the primary purpose of auditing existing code and does not represent an elevated risk beyond the intended functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 01:53 AM