frontend-to-backend-requirements
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill functions strictly as a template-based documentation generator. It does not utilize any tools for network communication, remote script execution, or privileged system access. All activities are confined to creating text-based documentation.- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input describing UI features and data needs to populate a markdown template, creating a theoretical attack surface for indirect prompt injection. However, given its primary purpose and the absence of high-risk capabilities, the overall risk is minimal.
- Ingestion points: User descriptions of components, data requirements, and actions (SKILL.md).
- Boundary markers: The skill does not implement specific delimiters or 'ignore embedded instructions' warnings for external data.
- Capability inventory: Local file-writing access restricted to the .claude/docs/ai/ path (SKILL.md).
- Sanitization: No input sanitization or validation protocols are observed in the instruction set.
Audit Metadata