mobile-design

Pass

Audited by Gen Agent Trust Hub on Nov 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a high-quality educational resource for mobile development, covering performance, navigation, typography, and platform-specific guidelines for iOS and Android.
  • [COMMAND_EXECUTION]: The skill includes a Python script scripts/mobile_audit.py intended for local static analysis of project files. This script uses regular expressions to identify mobile UX and performance anti-patterns (e.g., ScrollView usage, missing haptics, or insecure token storage). It operates entirely locally and does not execute the analyzed code or perform network operations.
  • [DATA_EXPOSURE]: The documentation provides security best practices for developers, explicitly warning against insecure practices like storing tokens in AsyncStorage or hardcoding API keys, and recommending SecureStore or Keychain instead.
  • [INDIRECT_PROMPT_INJECTION]: While the skill is designed to ingest and analyze user project data (the attack surface), it focuses on providing technical feedback based on established design principles. There are no patterns suggesting the skill could be used to exfiltrate data or override agent safety guidelines via processed content.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 5, 2026, 06:22 AM