frontend-design
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data which could contain malicious instructions meant to influence the agent's behavior during code generation.
- Ingestion points: According to
SKILL.md, the agent reads user briefs, repository design tokens, existing components, screenshots, andDESIGN.mdfiles. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' prompts when processing external content.
- Capability inventory: The skill allows the agent to generate and potentially execute (via artifacts) HTML, CSS, JavaScript, and framework-specific code (React, Vue, Svelte).
- Sanitization: There are no explicit instructions for sanitizing or escaping the content retrieved from external files or user briefs before it is used in the prompt context.
Audit Metadata