frontpage-profile
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill's logic is transparent and focuses on interacting with the frontpage.sh API for profile management. No malicious obfuscation, credential harvesting, or unauthorized persistence mechanisms were found.
- [EXTERNAL_DOWNLOADS]: The skill communicates with
www.frontpage.shto fetch and update user profiles. These operations are consistent with the skill's stated purpose and target the vendor's official infrastructure. - [INDIRECT_PROMPT_INJECTION]: This skill ingests profile data from an external source.
- Ingestion points: Public profile data retrieved via
GET /api/profiles/{wallet}inSKILL.md. - Boundary markers: None present.
- Capability inventory: The skill documentation only describes API interactions; there are no scripts or instructions for local file system access or system command execution.
- Sanitization: None described.
Audit Metadata