design-taste-frontend-v1
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to dynamically adapt its baseline configuration values (DESIGN_VARIANCE, MOTION_INTENSITY, VISUAL_DENSITY) based on explicit user chat prompts, creating a surface where untrusted input influences the agent's logic.
- Ingestion points:
SKILL.md(Section 1) explicitly directs the agent to "ALWAYS listen to the user" to override hardcoded baseline values. - Boundary markers: The skill lacks specific delimiters or "ignore embedded instructions" warnings to separate user-provided configuration overrides from the agent's core instructions.
- Capability inventory: The skill enables the agent to generate and potentially execute React/Next.js code, as well as install third-party Node.js packages (
npm install). - Sanitization: There are no defined validation or sanitization protocols for the dynamic configuration values provided by the user.
- [EXTERNAL_DOWNLOADS]: The skill references external resources for upstream updates and placeholder assets.
- Source: Upstream repository at
https://github.com/Leonxlnx/taste-skillis referenced in the metadata. - Source: Suggests using the well-known placeholder service
picsum.photosfor image assets in generated code.
Audit Metadata