frontend-design
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data (design briefs) to generate executable code (CSS and UI structures).
- Ingestion points: The skill explicitly instructs the agent to process a human's 'design brief' in SKILL.md.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when the agent interpolates content from the brief into its thought process or code generation.
- Capability inventory: The skill enables the agent to generate and potentially write CSS, HTML, and UI components based on user input.
- Sanitization: There is no evidence of input validation, escaping, or sanitization of the brief's content before it influences code generation.
- [SAFE]: The skill does not perform any network operations, access sensitive file paths, use obfuscated code, or execute remote scripts. It is purely instructional in nature and follows standard practices for design guidance.
Audit Metadata