frontend-mobile-development-component-scaffold
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill functions as a template generator for frontend development. It does not contain any instructions for network operations, sensitive file access, persistence mechanisms, or privilege escalation.
- [INDIRECT_PROMPT_INJECTION]: The skill uses the
$ARGUMENTSplaceholder to ingest user-provided component specifications which are then processed to generate code implementations. - Ingestion points: User requirements enter the system through the
$ARGUMENTSsection inSKILL.md. - Boundary markers: While the skill provides a rigid
ComponentSpecinterface to guide the output, it does not include explicit delimiters or instructions for the agent to ignore potentially malicious instructions embedded in the requirements input. - Capability inventory: The skill is restricted to code generation; it lacks any capabilities for command execution, external network calls, or file system modifications.
- Sanitization: There is no explicit sanitization or validation of the input strings before they are used to populate component names or prop definitions.
Audit Metadata