frontend-design
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided frontend requirements, which constitutes an attack surface for indirect prompt injection where malicious instructions could be embedded in the design requests.
- Ingestion points: The skill takes input from users describing a 'component, page, application, or interface to build' as mentioned in
SKILL.md. - Boundary markers: There are no explicit delimiters or boundary markers defined in the instructions to separate user input from the skill's logic.
- Capability inventory: The skill is capable of generating and providing 'runnable code' in HTML, CSS, JS, React, and Vue, which could be exploited if malicious instructions influence the output code.
- Sanitization: No explicit sanitization, filtering, or validation of user-provided content is defined within the skill instructions.
Audit Metadata