frontend-design
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user requirements to generate frontend code, creating a potential surface for indirect prompt injection.
- Ingestion points: User input regarding frontend design requirements, purpose, and technical constraints (SKILL.md).
- Boundary markers: The skill does not define specific delimiters or instructions to the agent to ignore potentially malicious commands embedded within the user's input.
- Capability inventory: The skill is designed for UI code generation (HTML/CSS/JS, React, Vue). It lacks capabilities for network access, file system manipulation, or subprocess execution.
- Sanitization: No input validation or sanitization routines are implemented to check the safety of the user-provided requirements.
Audit Metadata