mobile-app-design
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the full implementation from an external community GitHub repository (
awesome-skills/mobile-app-design) using thenpx skills addcommand. While this is a standard installation flow for this platform, the source is an unverified community organization. - [COMMAND_EXECUTION]: The skill utilizes several helper scripts for its core functionality, including
accessibility-audit.sh,check-contrast.py, andvalidate-touch-targets.sh. These scripts are intended to be executed locally within the user's environment to perform design audits. - [INDIRECT_PROMPT_INJECTION]: The skill audits design files and source code, creating a surface where the agent processes untrusted project data that could potentially contain malicious instructions.
- Ingestion points: Local project files, UI components, and design assets (e.g., React Native source code).
- Boundary markers: None present in the skill instructions to delimit untrusted data or warn against embedded instructions.
- Capability inventory: Execution of shell and Python audit scripts, and standard file system read access.
- Sanitization: No evidence of sanitization or validation of the audited files before processing.
Audit Metadata