sleek-design-mobile-apps
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install its full implementation from the official 'sleekdotdesign/agent-skills' repository on GitHub. This is a standard installation pattern for the platform and targets the official vendor repository.
- [COMMAND_EXECUTION]: The skill body contains shell commands intended for checking installation status and executing the 'npx skills add' command to perform the installation. These are administrative commands standard for skill management.
- [INDIRECT_PROMPT_INJECTION]: The skill processes natural language design briefs to generate mobile app screens. This creates an ingestion point for untrusted data that could potentially contain hidden instructions.
- Ingestion points: Screen design from a brief (mentioned in SKILL.md).
- Boundary markers: None explicitly defined in the stub files.
- Capability inventory: Performs REST API calls to Sleek's infrastructure and writes React Native/HTML code to the local filesystem.
- Sanitization: Not specified in the stub documentation; relies on the underlying agent's safety protocols.
Audit Metadata