senior-frontend
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill uses clear, instructional language to define the agent's persona as a design engineer. There are no attempts to bypass safety filters, override system prompts, or extract sensitive instructions. The inclusion of an 'Audit Mode' is a functional feature for reviewing code quality rather than a security bypass attempt.
- [EXTERNAL_DOWNLOADS]: The skill references industry-standard tools and libraries including shadcn/ui, Framer Motion, and Lucide React. These are mentioned within the context of standard developer workflows for project initialization and component management. No downloads from untrusted or suspicious sources were identified.
- [REMOTE_CODE_EXECUTION]: There are no patterns involving the execution of remote scripts (e.g., curl | bash) or the use of unsafe dynamic execution functions like eval() or exec(). All code snippets are declarative React/Next.js components.
- [DATA_EXFILTRATION]: The skill does not contain instructions to access sensitive system files, environment variables, or hardcoded credentials. It does not perform any unauthorized network requests or data transmission to external domains.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or secrets were found. The skill correctly advises using CSS variables and design tokens for theme management rather than sensitive data storage.
Audit Metadata