mobile-apps-create

SUSPICIOUS: the skill’s purpose is coherent as a Salesforce mobile router, and the child-skill sources appear legitimate and Salesforce-related. However, it explicitly performs transitive skill installation from mutable public repos via `npx skills add`, so the main risk is delegated trust and unpinned remote content rather than direct malware or credential theft in this router skill.