frontend-dev
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses environment variables (
MINIMAX_API_KEY,MINIMAX_API_BASE) for managing sensitive API credentials, preventing the risk of hardcoded secrets. - [SAFE]: Dependencies such as
requestsfor Python and UI libraries likeframer-motionandthree.jsfor Node.js are sourced from official registries and are standard for professional frontend development. - [SAFE]: The skill incorporates a structured workflow that mandates local storage for all generated media assets, ensuring that project resources remain within the user's controlled environment.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied natural language requests to generate code and assets. This is the core functionality of the tool and is implemented without instructions that attempt to bypass AI safety guidelines or extract system prompts.
- [SAFE]: The inclusion of license-compliant fonts and clearly defined p5.js templates facilitates secure and reproducible generative art creation.
Audit Metadata