mobile-web-polish
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill exclusively contains documentation, CSS snippets, and client-side JavaScript for improving mobile web responsiveness and Apple HIG compliance. All code patterns provided are industry-standard best practices for frontend development.
- [EXTERNAL_DOWNLOADS]: No external downloads, remote script executions, or unverifiable dependencies were identified. The skill relies entirely on standard web technologies (HTML, CSS, JS).
- [DATA_EXFILTRATION]: No commands for data exfiltration, network requests to untrusted domains, or access to sensitive local files (such as credentials or environment variables) were found.
- [PROMPT_INJECTION]: The instructions are purely technical and instructional. There are no attempts to bypass safety filters, override agent behavior, or extract system prompts.
- [OBFUSCATION]: No obfuscated code, Base64-encoded payloads, hidden characters, or homoglyph attacks were detected in any of the analyzed files.
- [COMMAND_EXECUTION]: While the skill mentions the use of Playwright MCP tools for layout verification, this is within the expected context of a frontend developer tool and does not involve arbitrary or malicious command execution.
Audit Metadata