frontend-design
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user requirements to generate code, which is an inherent vulnerability surface for indirect prompt injection.
- Ingestion points: User-provided frontend requirements (components, pages, applications) as defined in SKILL.md.
- Boundary markers: None present in the instructions.
- Capability inventory: The skill's functionality is limited to generating UI code (HTML, CSS, JS, React, Vue) and lacks capabilities for command execution, network operations, or file system access.
- Sanitization: None present.
Audit Metadata