matlab-build-app is a skill in matlab/matlab-agentic-toolkit, last changed 8 Oct 2026. It can run shell commands, reach the network, name web addresses, bundle scripts, pre-approve tools and include files we can't read — read the findings before installing.

From the author
Build MATLAB apps from requirements to working code. Asks discovery questions (or skips them when the path is known), recommends UIFigure or UIHTML architecture, identifies layout archetype (Dashboard, Explorer, Tabbed, Wizard, Canvas), produces an implementation plan, and executes the build. For UIFigure apps, optionally serializes as App Designer (.mlapp or plain-text .m + .xml). Use when a user wants to build a MATLAB app, create a GUI, make an interactive tool, build a uifigure app, build a uihtml app, build an App Designer app, build a .mlapp app, build a plain-text App Designer app, or asks which approach to use. Also use when user describes spatial layout needs: dashboard, control panel, sidebar, tabs, wizard, stepper, canvas, workspace.

At a glance

Pattern check

5 items to review

Broad tools pre-approved in allowed-tools

R34 · High · SKILL.md:20and 4 more

Commit 032b4b6 · 29 Oct 2026

How the check works

Pattern check:5 items to reviewSee them

Install

Each tab says whether it installs commit 032b4b6, the one we checked, or the latest version.

Read these 5 items before installing, starting with Broad tools pre-approved in allowed-tools — SKILL.md:20

Read SKILL.md first
Licence not identified
Licence
1.2k
Repo stars
Publisher

What it can touch

From the files and frontmatter at commit 032b4b6. This is how much a skill can do, not whether it is risky.

Pattern check

Pattern check: 5 items to review · commit 032b4b6 · 29 Oct 2026

We checked every text file in this skill, at commit 032b4b6 on 29 Oct 2026, against 45 published patterns such as download-and-run commands, hidden text and credential access. We don't run the skill, we don't read the web pages it points to, and we can't judge everything its instructions might lead an agent to do. In published tests, pattern checks like this one missed most malicious skills. Read the skill before you install it — especially anything it asks you to download or run.

How the check worksReport an incorrect finding

Files we didn't read

  • scripts/+module/+backgroundtask/BackgroundTaskModule.p · binary file
  • scripts/+module/AppBuilderModule.p · binary file
  • scripts/AppDesignerAgentInterface.p · binary file
  • scripts/MlappBackend.p · binary file
  • scripts/PlainTextBackend.p · binary file
  • https://www.mathworks.com/content/dam/mathworks/license/pmrl/license.md
  • https://cdn.jsdelivr.net/npm/chart.js@4.5.1/dist/chart.umd.min.js
  • https://cdn
  • http://www.w3.org/2001/XMLSchema
  • https://cdn.jsdelivr.net/npm/chartjs-adapter-date-fns@3.0.0/dist/chartjs-adapter-date-fns.bundle.min.js

Format check

Each agent reads SKILL.md a little differently. We check the file against each one's published rules; we don't run the skill in any agent.

  • Agent Skills specPasses with warnings

    The open format from agentskills.io, held to what the strictest agents enforce, so one folder loads everywhere.

    • Warning

      allowed-tools is a list; the spec defines a space-separated string. gh skill publish rejects a list, though Claude Code accepts one. O5

      Fix: Write it on one line: allowed-tools: Read Write Edit Bash Grep Glob

    • Warning

      The body is about 5,031 tokens (approx.); the spec suggests under 5,000. B2

      Fix: Move detail into reference files that the agent reads only when needed.

    • Note

      Reference files over 100 lines with no table of contents at the top: references/app-designer/agent-guide-mlapp.md (327 lines), references/app-designer/agent-guide-plaintext.md (300 lines), references/app-designer/agent-guide-shared.md (540 lines), references/app-designer/background-tasks.md (109 lines), references/app-designer/plaintext/classdef-template.md (356 lines) and 34 more. B5

      Fix: Add a short list of the sections at the top of each.

  • Claude CodePasses

    Claude Code reads its own extra fields, ignores unknown ones, and still loads a skill whose frontmatter is broken, without its fields.

    • Note

      The body is about 5,031 tokens (approx.); the spec suggests under 5,000. After compaction Claude Code keeps only the first 5,000 tokens of a skill. B2

      Fix: Move detail into reference files that the agent reads only when needed.

    • Note

      Reference files over 100 lines with no table of contents at the top: references/app-designer/agent-guide-mlapp.md (327 lines), references/app-designer/agent-guide-plaintext.md (300 lines), references/app-designer/agent-guide-shared.md (540 lines), references/app-designer/background-tasks.md (109 lines), references/app-designer/plaintext/classdef-template.md (356 lines) and 34 more. B5

      Fix: Add a short list of the sections at the top of each.

  • Claude apps & API uploadPasses

    Uploading to claude.ai or the Claude API, or packaging with Anthropic's script, accepts only the six spec fields and stops on anything else.

    • Note

      The description is 754 characters. The claude.ai Help Center says 200 at most, though Anthropic's API docs and validator allow 1,024. D4

      Fix: If the claude.ai upload refuses it, trim the description to 200 characters.

    • Note

      allowed-tools is a list; the spec defines a space-separated string. O5

      Fix: Write it on one line: allowed-tools: Read Write Edit Bash Grep Glob

    • Note

      The body is about 5,031 tokens (approx.); the spec suggests under 5,000. Anthropic's guidance says the same. B2

      Fix: Move detail into reference files that the agent reads only when needed.

    • Note

      Reference files over 100 lines with no table of contents at the top: references/app-designer/agent-guide-mlapp.md (327 lines), references/app-designer/agent-guide-plaintext.md (300 lines), references/app-designer/agent-guide-shared.md (540 lines), references/app-designer/background-tasks.md (109 lines), references/app-designer/plaintext/classdef-template.md (356 lines) and 34 more. B5

      Fix: Add a short list of the sections at the top of each.

  • OpenAI (Codex & API)Passes

    Codex finds SKILL.md by its exact name and needs a description; OpenAI's Skills API checks the frontmatter against the spec and caps uploads.

    • Note

      allowed-tools is a list; the spec defines a space-separated string. O5

      Fix: Write it on one line: allowed-tools: Read Write Edit Bash Grep Glob

  • VS Code & CopilotPasses

    VS Code reads skills one folder below .github/skills, .claude/skills or .agents/skills and falls back to the folder name when the name is missing or differs; GitHub's Copilot docs require the exact name SKILL.md.

    • Note

      allowed-tools is a list; the spec defines a space-separated string. O5

      Fix: Write it on one line: allowed-tools: Read Write Edit Bash Grep Glob

SKILL.md

We only show SKILL.md text here when its licence clearly allows it.

Read SKILL.md on GitHub (opens in a new tab)

Files

66 files

PathSize
SKILL.md (opens in a new tab)20.9 KB
assets/colors_and_type.css (opens in a new tab)12.8 KB
assets/minimal-bridge.html (opens in a new tab)1.3 KB
assets/minimal-bridge.m (opens in a new tab)1.2 KB
assets/standalone-chart-template.html (opens in a new tab)11.5 KB
manifest.yaml (opens in a new tab)672 B
references/app-designer/agent-guide-mlapp.md (opens in a new tab)15.7 KB
references/app-designer/agent-guide-plaintext.md (opens in a new tab)14.7 KB
references/app-designer/agent-guide-shared.md (opens in a new tab)27.1 KB
references/app-designer/background-tasks.md (opens in a new tab)4.8 KB
references/app-designer/plaintext/classdef-template.md (opens in a new tab)11.3 KB
references/app-designer/plaintext/matlabAppSchema.xsd (opens in a new tab)16.8 KB
references/app-designer/plaintext/property-reference.md (opens in a new tab)45.1 KB
references/app-designer/plaintext/xml-template.md (opens in a new tab)12.3 KB
references/archetypes/canvas.md (opens in a new tab)8 KB
references/archetypes/dashboard.md (opens in a new tab)6.4 KB
references/archetypes/explorer.md (opens in a new tab)5.7 KB
references/archetypes/tabbed.md (opens in a new tab)6.6 KB
references/archetypes/wizard.md (opens in a new tab)9.7 KB
references/background-tasks.md (opens in a new tab)6.9 KB
Show 46 more
PathSize
references/editing-guide.md (opens in a new tab)3.3 KB
references/timers.md (opens in a new tab)2.1 KB
references/uifigure/callbacks.md (opens in a new tab)3 KB
references/uifigure/components.md (opens in a new tab)1.7 KB
references/uifigure/containers.md (opens in a new tab)1.3 KB
references/uifigure/grid-layout.md (opens in a new tab)4.9 KB
references/uifigure/guide.md (opens in a new tab)5.3 KB
references/uifigure/layout-patterns.md (opens in a new tab)1.5 KB
references/uifigure/mvvm-background-tasks.md (opens in a new tab)3.9 KB
references/uifigure/mvvm-guide.md (opens in a new tab)11.1 KB
references/uifigure/mvvm-testing.md (opens in a new tab)2.8 KB
references/uifigure/mvvm-view-binding.md (opens in a new tab)5.4 KB
references/uihtml/brand-design-tokens.md (opens in a new tab)5.6 KB
references/uihtml/bridge-guide.md (opens in a new tab)7 KB
references/uihtml/chart-bridge-integration.md (opens in a new tab)7.5 KB
references/uihtml/chart-performance.md (opens in a new tab)5 KB
references/uihtml/chart-type-selection.md (opens in a new tab)3.1 KB
references/uihtml/chart-updates.md (opens in a new tab)4.7 KB
references/uihtml/charting-guide.md (opens in a new tab)3.9 KB
references/uihtml/chartjs-setup.md (opens in a new tab)4 KB
references/uihtml/communication-patterns.md (opens in a new tab)4.2 KB
references/uihtml/component-styles.md (opens in a new tab)4.3 KB
references/uihtml/css-layout-patterns.md (opens in a new tab)5 KB
references/uihtml/dark-mode.md (opens in a new tab)3.8 KB
references/uihtml/data-types.md (opens in a new tab)2.7 KB
references/uihtml/doughnut-scatter-charts.md (opens in a new tab)6 KB
references/uihtml/error-handling.md (opens in a new tab)4.6 KB
references/uihtml/external-color-schemes.md (opens in a new tab)2.6 KB
references/uihtml/js-coding-guide.md (opens in a new tab)11.2 KB
references/uihtml/js-testing-debugging.md (opens in a new tab)2.9 KB
references/uihtml/line-bar-charts.md (opens in a new tab)5.2 KB
references/uihtml/mvvm-guide.md (opens in a new tab)11 KB
references/uihtml/mvvm-observable-classes.md (opens in a new tab)2.9 KB
references/uihtml/mvvm-view-binding.md (opens in a new tab)5.3 KB
references/uihtml/platform-limitations.md (opens in a new tab)2.5 KB
references/uihtml/setup.md (opens in a new tab)3.9 KB
references/uihtml/styling-guide.md (opens in a new tab)8.1 KB
scripts/+module/+backgroundtask/BackgroundTaskModule.p (opens in a new tab)2.5 KB
scripts/+module/+backgroundtask/templates/cancelBackground.m (opens in a new tab)357 B
scripts/+module/+backgroundtask/templates/handleBackgroundComplete.m (opens in a new tab)1.4 KB
scripts/+module/+backgroundtask/templates/safeProgress.m (opens in a new tab)734 B
scripts/+module/+backgroundtask/templates/startBackground.m (opens in a new tab)1.2 KB
scripts/+module/AppBuilderModule.p (opens in a new tab)242 B
scripts/AppDesignerAgentInterface.p (opens in a new tab)12.6 KB
scripts/MlappBackend.p (opens in a new tab)9.4 KB
scripts/PlainTextBackend.p (opens in a new tab)10.2 KB

More from matlab/matlab-agentic-toolkit

SkillWhat it can touchPattern checkLicenceUpdated
  • Reaches the network
  • Names web addresses
Pattern check: Nothing flaggedNo licence10 Sept 2026
  • Names web addresses
Pattern check: Nothing flaggedNo licence24 Sept 2026
  • Names web addresses
Pattern check: Nothing flaggedNo licence31 Jul 2026
  • Names web addresses
Pattern check: Nothing flaggedNo licence13 Aug 2026
  • Runs shell commands
  • Names web addresses
Pattern check: Nothing flaggedNo licence8 Oct 2026
  • Runs shell commands
  • Names web addresses
Pattern check: Nothing flaggedNo licence13 Aug 2026
All skills in matlab/matlab-agentic-toolkit

Other Product & project management skills

Same category, most repo stars first.

SkillWhat it can touchPattern checkLicenceUpdated
  • Runs shell commands
  • Bundles scripts
Pattern check: Nothing flaggedMIT21 Oct 2026
writing-plansUse when you have a spec or requirements for a multi-step task, before touching code

obra/superpowers

  • Instructions only

Pattern check: Nothing flaggedMITUpdated 25 Sept 2026

  • Instructions only
Pattern check: Nothing flaggedMIT25 Sept 2026
  • Changes agent settings
  • Runs shell commands
  • +1 more
Pattern check: Nothing flaggedMIT1 Oct 2026
  • Runs shell commands
Pattern check: Nothing flaggedMIT10 Oct 2026
discernment-nudgeAfter you give a substantive answer or draft that the user may act on — advice or recommendations, drafted artifacts such as goals, plans, pitches, proposals, or emails, estimates or projections, analysis or interpretation of data, factual claims they may rely on, or a multi-step argument — invoke this skill BEFORE finalizing your reply and then, if it applies, append 2-3 short follow-up questions, each tied to something specific in what you just produced, that help the user check key facts, probe the reasoning or assumptions, and notice missing context. Do this at most once per conversation. Skip it when the user asked a trivial how-to or simple lookup, wants a purely educational explanation, asked you only to format, convert, or assemble a file from content they provided, is writing code they will run, is doing creative writing or casual chat, or already asked you to double-check, cite, or review — the skill file explains these boundaries and the exact output format.

anthropics/skills

  • Names web addresses

Pattern check: Nothing flaggedApache 2.0Updated 17 Aug 2026

  • Names web addresses
Pattern check: Nothing flaggedApache 2.017 Aug 2026
  • Runs shell commands
  • Pre-approves tools
Pattern check: 1 item to reviewMIT27 Oct 2026