frontend-design

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes instructions to synchronize the current branch with the remote origin using git commands (git fetch, git pull, git stash) before performing edits. These are standard version control operations intended for maintenance and do not involve unauthorized data access.
  • [EXTERNAL_DOWNLOADS]: The documentation provides installation instructions via npx and asm that reference the author's GitHub repository (github.com/luongnv89/skills). These references point to the vendor's own infrastructure for skill distribution.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user requirements and existing codebase context to generate frontend implementations, which represents a surface for indirect prompt injection. 1. Ingestion points: User design requirements, brand guidelines, and existing repository files (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Git subprocess calls and file system write access for code generation (SKILL.md). 4. Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 03:34 PM