do-review-frontend
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a set of static analysis and architectural guidelines for frontend developers. It uses local shell commands (like
git,grep, andfind) to identify changed files and detect technologies, which are standard and appropriate for a development-focused code review tool. - [SAFE]: The documentation within the skill provides robust security guidance, explicitly warning users about potential vulnerabilities like XSS in
dangerouslySetInnerHTML, CSRF risks in GET-based logouts, and data exposure through unprojected ORM records. It promotes industry-standard security mitigations. - [SAFE]: Instructions for external tool usage, such as
npx shadcnfor component installation, refer to well-known technology providers (Vercel) and established patterns in the React ecosystem. No suspicious or obfuscated remote execution patterns were found.
Audit Metadata