frontend-design

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied frontend requirements to generate executable code, which presents a surface for indirect prompt injection attacks.
  • Ingestion points: The skill in SKILL.md accepts requirements for components, pages, and applications from the user.
  • Boundary markers: Absent; there are no explicit boundary markers or instructions to the agent to ignore potentially malicious instructions embedded in the user's requirements.
  • Capability inventory: The skill is designed to generate functional HTML, CSS, JavaScript, React, and Vue code (as described in SKILL.md) which can perform operations in a web environment.
  • Sanitization: Absent; the skill does not provide methods for sanitizing or validating user input before it is incorporated into the generated code.
  • [EXTERNAL_DOWNLOADS]: The skill references the animejs library in references/animejs.md.
  • The documentation includes instructions for installing the well-known animejs package via NPM.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:57 PM