skills/haxqer/skills/frontend-dev/Gen Agent Trust Hub

frontend-dev

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses official development tools and libraries including Vite, Tailwind CSS, and shadcn/ui. The instructions provided are consistent with the official documentation of these projects and follow standard industry patterns for frontend development. \n- [REMOTE_CODE_EXECUTION]: The skill documents the capability to add components from external URLs using the npx shadcn@latest add <url> command. This is a built-in feature of the official shadcn/ui CLI. The skill provides a clear warning that users should only import code from registries they trust, as this code is integrated directly into the project's source. \n- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve scanning the project directory for configuration files (e.g., package.json, components.json) to align the agent's actions with the existing project structure. While this represents a data ingestion surface, the implementation is focused on project context and does not involve the interpolation of untrusted data into high-privilege execution contexts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 10:08 AM