developing-lt-frontend
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides robust security guidance for frontend developers, including specific implementations for DOM sanitization, secure cookie handling, and Content Security Policy configuration to mitigate common web vulnerabilities.
- [COMMAND_EXECUTION]: The instructions include standard shell commands for service health monitoring and local process management on development ports (3000, 3001). These commands (curl, lsof, kill) are intended for local environment maintenance and do not exhibit malicious behavior.
- [INDIRECT_PROMPT_INJECTION]: The skill handles data from external API sources, representing a potential attack surface. Ingestion points: external API endpoints via sdk.gen.ts. Boundary markers: documentation explicitly warns against v-html and provides instructions to treat data as untrusted. Capability inventory: tool access includes Chrome DevTools and Playwright for browser interaction. Sanitization: strictly enforced through the use of DOMPurify for HTML content and Valibot for schema validation.
- [EXTERNAL_DOWNLOADS]: The skill references standard development dependencies and vendor-specific packages from trusted sources, aligning with the expected functionality of a frontend development toolset.
Audit Metadata