frontend-security-coder
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is to provide educational and practical guidance on implementing frontend security measures. The instructions promote best practices such as using textContent over innerHTML and utilizing sanitization libraries like DOMPurify.- [PROMPT_INJECTION]: No malicious instructions designed to bypass agent safety filters, override system prompts, or extract internal configuration were found. The language used is professional and task-oriented.- [DATA_EXPOSURE]: There are no hardcoded secrets, API keys, or credentials. The skill does not attempt to access sensitive local files or environment variables.- [REMOTE_CODE_EXECUTION]: The skill does not contain any commands to download, install, or execute external scripts or packages. References to libraries like DOMPurify are mentioned as implementation recommendations rather than runtime dependencies for the skill itself.- [OBFUSCATION]: All content is provided in clear, human-readable markdown. No Base64 encoding, hex-escapes, or hidden Unicode characters were detected.- [INDIRECT_PROMPT_INJECTION]: While the skill is designed to handle and process untrusted user input (e.g., for sanitization tasks), it explicitly instructs the agent to apply strict validation and sanitization techniques, which are defensive measures against such attacks.
Audit Metadata