frontend-change-recon
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
rg(ripgrep) to search for existing UI components and design tokens within the codebase. These operations are read-only and limited to hardcoded search patterns intended for project reconnaissance. - [EXTERNAL_DOWNLOADS]: The skill references external best-practice guides from trusted organizations including Anthropics and Vercel Labs. These references are instructional and do not involve the execution of untrusted remote code.
- [PROMPT_INJECTION]: The workflow involves analyzing external data such as issue tickets and developer comments. While this presents a surface for indirect prompt injection, the skill is purely procedural and does not provide capabilities that could be exploited through this vector.
- [PROMPT_INJECTION]: Ingestion points: issue tickets, comments, and linked designs in SKILL.md. Boundary markers: none present. Capability inventory: ripgrep search and instructions for code generation. Sanitization: none present.
Audit Metadata