frontend-security-coder
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive guidelines for secure frontend development, including XSS prevention, CSP configuration, and secure session management. No indicators of prompt injection, data exfiltration, or malicious execution were found.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied code and requirements to provide security advice. While this constitutes an attack surface for indirect prompt injection, the skill is explicitly focused on sanitization and security best practices (e.g., recommending DOMPurify and textContent), which serves as a mitigation for such risks. The severity is low as it represents standard interaction.
- [REMOTE_CODE_EXECUTION]: The skill references a local file
resources/implementation-playbook.mdfor extended documentation. There are no instructions to download or execute code from external or untrusted sources.
Audit Metadata