frontend-review-triage
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is instructed to execute a shell script
scripts/audit-triage.shto perform the initial assessment of the target repository. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from untrusted sources within the repository being analyzed, which could be used to influence agent behavior.
- Ingestion points: The
SKILL.mdfile (Procedure, Step 3) instructions the agent to readpackage.json,README.md, and the output ofgh issue list. - Boundary markers: The instructions do not define delimiters or specific warnings to ignore instructions embedded in the analyzed data.
- Capability inventory: The skill executes shell scripts and writes to the
.frontend-review/directory. - Sanitization: No sanitization or validation logic is specified for the data read from project files or external tools like the GitHub CLI.
Audit Metadata