frontend-design
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user requirements (e.g., 'create a submit button') to generate frontend code. It lacks explicit boundary markers or instructions to differentiate between the user's design requirements and potential malicious instructions embedded within that input.
- Ingestion points: User-provided frontend requirements in SKILL.md.
- Boundary markers: Absent; the skill does not define delimiters or specific 'ignore instructions' warnings for external data.
- Capability inventory: The skill facilitates the generation of functional HTML, CSS, and JavaScript (React/Vue) code, but does not execute shell commands or perform network operations itself.
- Sanitization: Absent; the skill does not specify any filtering or escaping of user content before interpolation into the generation process.
Audit Metadata