frontend-enhancer
Audited by ZeroLeaks on Apr 15, 2026
The SKILL.md carries a transparency concern due to an obfuscated or encoded execution path, which weakens pre-use reviewability and makes it harder to fully assess what the skill does before loading it. Prompt injection boundaries stay reasonably clear, with no strong signals that the skill pushes the agent to treat external data as instructions. However, behavior analysis was not run, so I cannot confirm whether loading this skill materially changes downstream behavior compared to baseline. Confidence is low: the obfuscation finding limits how much assurance this review can provide, and the absence of behavior testing leaves a meaningful gap.
The skill has 1 transparency concern that weaken pre-use reviewability, mainly around obfuscated or encoded execution path.
The scanned skill keeps data and instructions reasonably separate and does not strongly encourage the agent to treat external content as policy.
Behavior analysis was not run.
Obfuscated or encoded execution path