frontend-design-pro
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied queries to retrieve relevant UI/UX guidelines from its local database.
- Ingestion points: The
queryandproject-namearguments are ingested by the search engine inscripts/core.pyand the generator inscripts/design_system.py. - Boundary markers: The generated documentation uses standard Markdown headers and blockquotes to separate generated guidance from project logic.
- Capability inventory: The skill can read its internal CSV data and write Markdown files to a local
design-system/directory. It does not perform network operations or execute arbitrary system commands based on the user query. - Sanitization: Filenames for generated documentation are sanitized using the
safe_slugfunction inscripts/design_system.py, which uses regex to collapse all non-alphanumeric characters into dashes, effectively preventing path traversal attacks.
Audit Metadata