frontend-design
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided design briefs, which represents an ingestion point for untrusted data. However, the risk is negligible as the skill lacks execution capabilities such as network access, file system writes, or command execution, and focuses solely on aesthetic guidance.
- [EXTERNAL_DOWNLOADS]: The skill includes third-party notices referencing external software and font repositories (e.g., FFmpeg, Google Fonts, Vercel Geist). These references are for license attribution purposes only and do not trigger any downloads or execution during skill operation.
- [NO_CODE]: The skill consists entirely of instructional text, license documentation, and attribution notices. It contains no scripts, binaries, or executable logic.
Audit Metadata