visant-frontend
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and critique external source code provided by the user, which presents an attack surface for instructions embedded in data.
- Ingestion points: The agent is instructed to read source directories (e.g.,
components/,app/,src/) and analyze files usinggrep,readFileSync, and specialized auditing tools. - Boundary markers: There are no instructions to treat analyzed code as untrusted or to ignore instructions found within the user's project files.
- Capability inventory: The skill has access to powerful shell commands including
node,npm,npx, andgit. - Sanitization: The skill does not mention sanitizing or escaping the content of the analyzed files before processing them.
- [COMMAND_EXECUTION]: The skill relies on several shell-based tools to perform its functions.
- Executes a script from a sibling skill at
~/.claude/skills/visant-killer/scripts/killer-scan.mjsusingnode. - Instructs the agent to run
npx impeccable detectfor design auditing andnpx shadcn@latest addfor component management. - Includes standard build and verification commands like
npm run build,npx tsc, andpytest. - [EXTERNAL_DOWNLOADS]: The skill references and downloads external resources required for its design system and principles.
- Fetches UI component definitions from
https://ui.visantlabs.com/r/{name}.json(vendor-owned domain). - References the
revenue-centric-designproject on GitHub for persuasion mechanics.
Audit Metadata