frontend-design-extractor
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local shell scripts to automate repository scanning and scaffolding.
- Evidence: The instructions in SKILL.md direct the agent to run scripts/scan_ui_sources.sh for inventorying UI components and scripts/generate_output_skeleton.sh to create the output directory structure.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests and processes content from external frontend repositories.
- Ingestion points: The agent reads various source files (React, Vue, etc.) and configuration files from a target repository root.
- Boundary markers: No explicit delimiters or boundary markers are defined to isolate untrusted repository content from the agent's instructions.
- Capability inventory: The skill is capable of executing shell scripts, writing new files, and performing in-place refactoring of existing project code.
- Sanitization: There is no evidence of sanitization or validation logic to filter potentially malicious instructions embedded in the source code being analyzed.
Audit Metadata