developer-frontend-engineer
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill incorporates a 'Zero Exposed Secrets Rule' that strictly prohibits the agent from including API keys, passwords, or tokens in client-side code, which is a critical security best practice.
- [SAFE]: The workflow mandates that all third-party integrations requiring credentials must be routed through a secure backend proxy (
/api/...), effectively preventing the leakage of sensitive authorization headers from the browser. - [SAFE]: The skill defines clear boundaries that limit the agent's scope to frontend tasks, explicitly preventing unauthorized modifications to backend business logic or database schemas.
- [SAFE]: No malicious patterns such as obfuscation, remote code execution, or unauthorized network access were found. The skill also includes a quality checklist to verify that no sensitive data is leaked in the generated source code.
Audit Metadata