frontend-design
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided frontend requirements to generate code, creating an attack surface where malicious instructions could be embedded in the input data.
- Ingestion points: User-provided requirements (component, page, or application descriptions) enter the agent context as described in SKILL.md.
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands for the user-provided data.
- Capability inventory: The skill facilitates the generation of functional frontend code (HTML, CSS, JavaScript, React, Vue). It does not include explicit network or filesystem capabilities beyond standard agent tools.
- Sanitization: There are no explicit sanitization or validation steps for the user-provided requirements before they are used to influence code generation.
Audit Metadata