engineering-frontend-developer
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions define a legitimate persona for frontend development without any signs of prompt injection, data exfiltration, or obfuscation. The provided example component and workflow follow industry best practices.
- [COMMAND_EXECUTION]: The script
run.shexecutes a local Python runner in a standard way, posing no security risk in the intended environment. - [INDIRECT_PROMPT_INJECTION]: The skill includes instructions to handle external data through WebSocket bridges and protocol URIs. While these represent potential attack surfaces for indirect injection, no malicious use cases or patterns are specified in the persona.
Audit Metadata