frontend-development-workflow
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run development commands found in the repository's
package.json, such as type checks, linting, and starting dev servers. This is standard practice for frontend development workflows. - [EXTERNAL_DOWNLOADS]: The
scripts/verify_frontend.pyscript identifies a dependency on theplaywrightlibrary and provides instructions to install it viapipif missing. Playwright is a well-known, trusted browser automation tool. - [DATA_EXPOSURE]: The verification script captures screenshots of the local frontend and records console errors/network failures to a local directory (
frontend-verification/). This data remains within the local environment for the user's review. - [INDIRECT_PROMPT_INJECTION]: The skill processes UI element text and console logs during verification. While this is a data ingestion surface, the logic is restricted to health checks (e.g., checking for clipped text or unnamed buttons) and does not involve executing instructions found in that data.
Audit Metadata