frontend-developer-skill
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard developer utility for React, Vue, and Angular projects. Its primary function is to generate boilerplate code and manage project workflows through local scripts.
- [COMMAND_EXECUTION]: The skill provides utility scripts such as
scripts/scaffold_component.tsxandscripts/deploy.sh. These are intended to be run locally by the agent to automate development tasks. The Bash script uses safe patterns (likecasestatements) for parameter handling. - [EXTERNAL_DOWNLOADS]: The documentation references standard installations from the official NPM registry for well-known libraries such as React, Zustand, and TanStack Query. These references are part of the intended development workflow and target trusted ecosystems.
- [DYNAMIC_EXECUTION]: The skill generates source code files (e.g., .tsx, .ts, .css) on the local filesystem based on templates. This is an expected behavior for a project scaffolding tool and does not involve executing untrusted remote code.
- [DATA_EXFILTRATION]: No evidence of unauthorized data transmission was found. The generated API client code includes standard patterns for handling authentication tokens via browser storage (localStorage), which is consistent with the skill's purpose as a frontend development guide.
Audit Metadata