frontend-design
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied frontend requirements to generate code. This represents a standard input surface for potential indirect prompt injection, where a user could attempt to embed instructions within a design request.
- Ingestion points: User-provided frontend requirements and design context in SKILL.md.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands in user inputs are defined.
- Capability inventory: The skill is limited to generating frontend code (HTML, CSS, JS, React, Vue) and does not possess network or sensitive file system capabilities.
- Sanitization: No specific input sanitization or validation steps are included.
Audit Metadata