Borrowing it
Nothing to install: this file belongs to MohamedAbdallah-14/prompt-to-asset. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/MohamedAbdallah-14/prompt-to-asset/main/.claude/skills/app-icon/SKILL.mdgit clone --depth 1 https://github.com/MohamedAbdallah-14/prompt-to-assetWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mohamedabdallah-14/prompt-to-asset/app-icon)<a href="https://agentmods.dev/skills/mohamedabdallah-14/prompt-to-asset/app-icon"><img src="https://agentmods.dev/badge/skills/mohamedabdallah-14/prompt-to-asset/app-icon/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mohamedabdallah-14/prompt-to-asset/app-icon"><img src="https://agentmods.dev/badge/skills/mohamedabdallah-14/prompt-to-asset/app-icon.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 26 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00076 | $0.01203 |
| Opus 5 | $0.00038 | $0.00602 |
| Sonnet 5 | $0.00015 | $0.00241 |
| Haiku 4.5 | $0.00008 | $0.00120 |
Grade A, and why
app-icon scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 75 lines — stays where its author put it; the contents beside it link to each section on GitHub.
App icon generation
Platform requirements (non-negotiable)
| Platform | Size/format | Transparency | Safe zone |
|---|---|---|---|
| iOS App Store | 1024×1024 PNG, no alpha | opaque | squircle mask applied by OS; keep subject in 824px center |
| iOS device | 180, 167, 152, 120, 87, 80, 76, 60, 58, 40, 29, 20 (@1x, @2x, @3x) | opaque | same |
| iOS 18 dark / tinted | Icon Composer layered source | per-layer | same |
| Android adaptive | 108 dp foreground + 108 dp background; 72 dp visible safe zone | FG yes / BG no | 72 dp of 108 dp |
| Android 13 monochrome | themed drawable | yes | same |
| Google Play | 512×512 PNG, no alpha | opaque | — |
| PWA | 192, 512 any; 512 maskable |
maskable: opaque + 80% safe zone |
80% of 512 for maskable |
| visionOS | 3× 1024² PNGs (parallax layers) | per-layer | — |
Generation — mark, then pack
Never generate per-platform. Always: one 1024² RGBA master → deterministic fan-out.
- Route the mark generation (see
skills/logo/SKILL.md) — no text; subject-only. - Matte with BiRefNet if the chosen provider returned opaque.
- Deterministic export via
pipeline/export.ts::exportAppIconBundle(puresharp— no external CLI dependency):- iOS:
AppIcon.appiconset/Contents.json+ every required PNG (iPhone/iPad/Mac/Watch/marketing). 1024 marketing variant flattened onto brand primary color (App Store rejects alpha). iOS 18 dark/tintedappearancesemitted whenios_18_appearances: true. - Android:
mipmap-{mdpi,hdpi,xhdpi,xxhdpi,xxxhdpi}/ic_launcher.png+mipmap-anydpi-v26/ic_launcher.xmlpointing toic_launcher_foreground+ic_launcher_background+ic_launcher_monochrome(foreground-derived via greyscale+threshold; the final themed-icon result should still be audited manually for complex marks). - PWA:
192.png,512.png,512-maskable.png(80% safe-zone padding) +manifest-snippet.json. - visionOS: 1024²
master.png+ a README describing the 3-layer parallax split that Xcode's Reality Composer Pro or a manual Photoshop step produces. - Favicon bonus:
.ico(16/32/48 multi-res) via optionalpng-to-ico; falls back to separate PNGs with a warning if the dep is absent.
- iOS:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 75 lines · 76 tokens per session scan A 7e47c939d8bf
app-icon is a skill published in the GitHub repository MohamedAbdallah-14/prompt-to-asset (19 stars, last pushed yesterday), licensed MIT. It adds 76 tokens to every session and 1,203 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
skillshare-ui-website-style
Skillshare frontend design system for the React dashboard (ui/) and Docusaurus website (website/). Use this skill whenever you: build or modify a dashboard page or component in ui/src/, style or layout website pages or custom CSS in website/, create new React components for the dashboard, add pages to the dashboard…
user-research-cookiy
End-to-end user research assistant — qualitative and quantitative. Use this skill whenever the user mentions user research, user interviews, discussion guides, interview guides, research plans, qualitative research, quantitative research, user surveys, survey design, usability studies, participant recruitment…
cometchat-flutter-v6-customization
Theme and brand the Flutter v6 UI Kit — light/dark mode, the CometChatColorPalette / CometChatTypography / CometChatSpacing theme extensions, per-widget style objects, and view slots. Triggers: 'change chat colors flutter', 'dark mode chat flutter', 'match my brand flutter', 'customize cometchat theme flutter'…
hz-unity-meta-quest-ui
Configures Unity UI for Meta Quest and Horizon OS VR development — world-space canvases, TextMesh Pro setup, comfortable sizing, viewing distances, and interaction readiness.
figma-connect
Figma-to-code bridge combining Figma MCP server tools with the Code Connect CLI for end-to-end design implementation workflows. Use this skill when implementing UI components from Figma design URLs, publishing Code Connect mappings to Figma Dev Mode, extracting design tokens from Figma variables, setting up Figma Code…
frontend-design
Create distinctive, production-grade frontend interfaces with visual verification. Use this skill when the user asks to build web components, pages, landing pages, dashboards, React/Vue/Svelte components, HTML/CSS layouts, or any web UI that needs to look polished. Also activates when styling, beautifying…