frontend-developer
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety guidelines, or extract system prompts were found. The instructions are focused on frontend development logic.
- [DATA_EXFILTRATION]: No network-capable commands or access to sensitive local files such as .ssh or .aws are present. The skill operates within the local workspace.
- [COMMAND_EXECUTION]: The skill does not instruct the agent to execute shell commands, manage services, or modify system-level configurations.
- [EXTERNAL_DOWNLOADS]: No external resources, scripts, or packages are downloaded or executed. No third-party URLs are referenced for code retrieval.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface as it processes code but lacks malicious intent.
- Ingestion points: The skill interacts with existing frontend code and state boundaries in the workspace.
- Boundary markers: None explicitly defined for untrusted data.
- Capability inventory: The skill has workspace-write access as defined in the metadata for implementing UI changes.
- Sanitization: No explicit sanitization of codebase content is mentioned.
Audit Metadata