design-taste-frontend
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing numerous standard frontend packages from well-known and trusted providers, including Microsoft (Fluent UI), Google (Material Web), IBM (Carbon), Shopify (Polaris), and the UK/US governments (GOV.UK Frontend, USWDS).
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard package managers (npm, yarn, pnpm) and development CLI tools like
npx shadcn@latestfor component initialization and management. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and interpret user-provided design briefs to determine aesthetic directions. While this represents a data ingestion surface, it is fundamental to the skill's purpose and does not include unsafe processing or execution of that data.
- [SAFE]: All external references target well-known documentation sites, official GitHub repositories, or established asset CDNs (e.g., Simple Icons, Picsum). The code skeletons provided for GSAP and Framer Motion follow standard implementation patterns.
Audit Metadata