Versioned security assessment

Report ID: SA-5A0E4804

6/30/2026, 7:59:53 PM

sleek-design-mobile-apps security assessment v2

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
sleek-design-mobile-apps
Version
v2
Maintainer
sleekdotdesign
Source
github.com/sleekdotdesign/agent-skills/tree/main/skills/design-mobile-apps/
Coverage
1 Files scanned · 435 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Medium

3 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static external command and weak cryptography findings are false positives caused by Markdown backticks, endpoint examples, and inline API terms in SKILL.md. The confirmed risks are intentional network access to https://sleek.design, use of SLEEK_API_KEY, and optional image URL fetching by Sleek servers, so the skill is publishable with a network and credential warning.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 435 Lines analyzed

3 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 5 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Observed in 5 evidence locations

External commands

May invoke commands or programs outside the Skill.

Not recorded by this audit

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (3)

RISK-001 Medium
SKILL.md:14-17SKILL.md:46-49SKILL.md:178-186SKILL.md:295-308
Authorized External API Access
The skill instructs agents to send project names, prompts, component IDs, and screenshots requests to https://sleek.design. This is core functionality, but users should know their design content leaves the local environment.
The skill explicitly documents REST API calls to a single external host with user-provided design prompts and optional images. The behavior is intentional and scoped, but it is still real network disclosure.
RISK-002 Medium
SKILL.md:4-6SKILL.md:17SKILL.md:23-25SKILL.md:102-105
API Key Required For Bearer Authentication
The skill requires SLEEK_API_KEY and uses it in Authorization headers for Sleek API calls. This is legitimate credential use, but key scope and storage should be handled carefully.
The environment variable and Authorization header are directly documented. The key is sent only to Sleek endpoints in the instructions, so this is a controlled but sensitive capability.
RISK-003 Low
SKILL.md:49SKILL.md:184-186SKILL.md:193-195SKILL.md:433
Image URL Fetching Has Privacy Implications
The skill allows imageUrls in chat messages and states those URLs are fetched by Sleek servers. This is documented, but users should avoid private or sensitive URLs.
The behavior is clearly documented and may be legitimate visual context handling. The risk depends on what URLs users provide, so this is a lower-severity privacy concern.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (4)
Low
SKILL.md:14-19SKILL.md:79-90SKILL.md:102-109SKILL.md:295-308
External Command Findings Are Markdown False Positives
The static analyzer flagged many inline backticks and fenced examples as Ruby or shell backtick execution. SKILL.md is documentation and contains HTTP examples, endpoint paths, field names, and Markdown tables, not executable Ruby code.
Line review shows Markdown code formatting and HTTP request examples, not a script interpreter or command execution API. No executable files or shell invocations were present in the scanned file.
Low
SKILL.md:1-7SKILL.md:14-16SKILL.md:316-322SKILL.md:417
Weak Cryptography Findings Are Documentation False Positives
The static weak cryptography alerts do not correspond to cryptographic code. The referenced lines contain YAML metadata, API documentation, text examples, or screenshot option names.
Reviewed lines do not define hashing, encryption, random number generation, or cryptographic verification. The alerts appear to be token-level matches inside prose and API examples.
Low
SKILL.md:49SKILL.md:320SKILL.md:338-345
System Reconnaissance Findings Are False Positives
The system reconnaissance alerts map to documentation about image URLs, screenshot dot-grid options, and HTTP error codes. No host probing, environment enumeration, or local system discovery instructions were found.
The referenced text is API documentation and rendering configuration. It does not instruct the agent to inspect local systems or enumerate network targets.
Low
SKILL.md:4-7SKILL.md:14-17SKILL.md:46-49SKILL.md:178-186
Critical Combination Heuristic Is Not Confirmed
The static analyzer combined code execution, network, and credential signals into a critical heuristic. Context review found no executable code path; the network and credential use are documented Sleek API operations.
The heuristic depends on a code execution signal, but reviewed evidence is Markdown and HTTP documentation only. Network and API key use remain real but scoped to the described vendor API.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable