Skills
Navigate
skills/designed-by-ai/skills/design-mobile-apps/Gen Agent Trust Hub

design-mobile-apps

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API responses, including HTML components and assistant text from Sleek.
  • Ingestion points: Sleek API responses (SKILL.md).
  • Boundary markers: None explicitly mentioned for API data.
  • Capability inventory: Shell command execution (curl) for writing files; local file system write access for saving HTML and screenshots.
  • Sanitization: Not explicitly defined for the external component code.
  • [EXTERNAL_DOWNLOADS]: The skill fetches design specifications, screenshots, and assets from https://sleek.design and well-known icon services at https://api.iconify.design. These downloads are essential for the primary purpose of designing and implementing UI screens.
  • [COMMAND_EXECUTION]: The skill uses curl commands to fetch API data and write it directly to the local disk. This is a common and appropriate pattern for handling large data payloads like HTML code or image files in an automated workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 10:20 AM