frontend-dev
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by instructing the agent to analyze and process a wide variety of project files which may contain untrusted content.
- Ingestion points: The agent is directed to process files including Vue components, TypeScript/JavaScript files, style sheets, and configuration manifests such as
package.jsonandvite.config.*(specified inSKILL.md). - Boundary markers: The instructions lack specific delimiters or warnings to prevent the agent from following instructions potentially embedded within these files.
- Capability inventory: The agent typically operates with capabilities to read/write files and execute shell commands within the development environment.
- Sanitization: No sanitization or validation protocols are defined for the content ingested from the project files.
Audit Metadata