lov-frontend-design
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The
scripts/profile_store.pyutility manages local user and brand profiles. It includes a security blocklist to prevent the storage of sensitive information such as tokens, API keys, and passwords. - [DYNAMIC_EXECUTION]: The skill includes a validation script (
scripts/validate_skill.py) that usesyaml.safe_loadfor parsing configuration, which mitigates the risk of arbitrary code execution through malicious YAML files. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project code and requirements. The instructions provide a clear workflow for acceptance and verification using project-native tools to ensure consistency and safety.
Audit Metadata