Skill audit report
mobile-native Audit report.
Make a web app feel native on a phone — the small CSS and meta-tag fixes that separate "a website in a browser" from something that feels installed. Covers sticky hover states, tap highlight flashes, the 100vh bug, inputs that zoom the page, laggy taps, pull-to-refresh hijacking scroll, content under the notch, long-press selecting button text, carousels that scroll the wrong way, mismatched status bars, and the rule that you test on real hardware. Use when a web app is being built for or reviewed on mobile, when something "works in Chrome but feels wrong on my phone", when building a PWA, a bottom sheet, a carousel, a full-screen layout, or any touch interaction. For motion itself use animate; for React Native use animate-expo.
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub adoption
PASS100
57K GitHub stars
Stars/forks activity
PASS97
57K stars, 3.3K forks; issue activity unavailable in current metadata
Recent maintenance
PASS100
Pushed today
License clarity
PASS86
MIT
README/SKILL.md completeness
PASS86
Metadata includes enough usage and workflow context
Dependency/runtime risk
FAIL36
command execution surface, credential or environment access
Install availability
PASS92
npx skills add emilkowalski/skills --skill mobile-native
Install command safety
PASS92
standard package or runtime install path
Permission surface
FAIL22
secrets or environment access, shell or command execution
Repository evidence
PASS86
https://github.com/emilkowalski/skills/tree/main/skills/mobile-native
Review status
WARN51.27
AI review approval is missing
Agent Proven outcomes
INFO54
No agent outcome data yet
Checks
Install and adoption review
Install path
92
npx skills add emilkowalski/skills --skill mobile-native
Repository
88
https://github.com/emilkowalski/skills/tree/main/skills/mobile-native
License
86
MIT
Maintenance
100
Pushed today
AI review
55
Review approval is missing
README/SKILL.md completeness
86
Usable description available
Dependency risk
36
command execution surface, credential or environment access
Install command safety
92
standard package or runtime install path
Permission surface
22
secrets or environment access, shell or command execution
Stars/forks activity
97
57K stars, 3.3K forks; issue activity unavailable in current metadata
Adoption
88
57K GitHub stars
Warnings
- Dependency or permission surface needs review
- Permission surface may require sandboxing
- AI review approval is missing
- Quality score needs review
- Permission surface needs review: secrets or environment access, shell or command execution
- Dependency/runtime risk: command execution surface, credential or environment access
- Permission surface: secrets or environment access, shell or command execution
- Review status: AI review approval is missing
Method
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Compare nearby options
Related skills to audit next
dstack-prototyping
Use with the dstack skill for model-serving work when the image, serving command, resources, backend/fleet choice, or service behavior is not proven. Guides task-first prototyping on real hardware, choosing fleets/backends that can reuse idle instances and caches, checking vLLM/SGLang sources, and verifying the final dstack service with a model request.
2.3K Stars · Audit report
opentrons
Expert guidance for Opentrons Python API v2 - automated liquid handling, protocol development, labware management, and hardware module integration for OT-2 and Flex robots
42 Stars · Audit report
edr-bypass-re
逆向防御方实现 → 红队针对性绕过。把 EDR / Defender / AV 的 hook 表、ETW provider、AMSI 实现先逆向出来， 再写针对性的 unhook / 间接 syscall / ETW patch / call stack spoof。对照 MITRE ATT&CK T1562 防御规避。 触发关键词：EDR 绕过、AV bypass、免杀、unhook、direct syscall、indirect syscall、Hell's Gate、Halo's Gate、 Tartarus Gate、ETW patch、AMSI patch、call stack spoofing、hardware breakpoint Blindside、MITRE T1562、 ntdll unhook、kernel callback、CrowdStrike 绕过、Defender 绕过、Sentinel One 绕过、Elastic Defend、 Sysmon 规避、PPID spoof、Sleep mask、Process Hollowing、Reflective DLL。
29 Stars · Audit report