sleek-design-mobile-apps
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill uses a secure authentication model, requiring the SLEEK_API_KEY as an environment variable and providing a device-based authorization flow to ensure users do not need to manually handle or paste raw secrets into the chat context.\n- [EXTERNAL_DOWNLOADS]: Fetches design components, assets, and icons from the official Sleek API and the well-known Iconify icon service. These are legitimate resources required for the functionality of a mobile design tool.\n- [COMMAND_EXECUTION]: Instructs the agent to use shell commands to pipe large API responses directly to disk. This is a common performance optimization for agents to handle large payloads without exceeding token limits or causing output latency.\n- [SAFE]: The skill correctly limits its network scope in the metadata and provides clear instructions for handling design data, with no evidence of malicious obfuscation, persistence, or data exfiltration patterns.
Audit Metadata