frontend-code-review
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes user-provided frontend code files, which serves as a potential vector for indirect prompt injection if the code contains malicious instructions intended to manipulate the agent's behavior.\n
- Ingestion points: .tsx, .ts, and .js files provided by the user for review as defined in SKILL.md.\n
- Boundary markers: The instructions lack explicit delimiters or warnings for the agent to ignore embedded instructions within the code being analyzed.\n
- Capability inventory: The skill generates descriptive analysis, suggested code fixes, and answers user questions about the code, including suggesting fixes as described in the Required Output Format.\n
- Sanitization: No explicit sanitization or filtering of the input code content is defined in the skill instructions.
Audit Metadata