frontend-ui-engineering
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of high-quality documentation, engineering patterns, and code examples. No executable scripts, network operations, or dangerous system commands are present. All provided code snippets are for illustrative purposes within a React/TypeScript context.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow for building user interfaces that process user-defined content. While this creates a theoretical ingestion surface for untrusted data, the skill includes a robust
security-checklist.mdwhich explicitly mandates treating model and user output as untrusted, recommending sanitization, escaping, and strictly prohibiting the use of dangerous functions likeevalorinnerHTMLfor such content. - [REMOTE_CODE_EXECUTION]: The documentation mentions industry-standard development and auditing tools (e.g.,
npx axe-core,npx lighthouse,npx pa11y). These are well-known utilities used for local development verification and do not constitute a remote code execution risk within the skill's execution context.
Audit Metadata