frontend-dev-guidelines

Warn

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: MEDIUMREMOTE_CODE_EXECUTIONMETADATA_POISONING
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides multiple examples in its resource files (e.g., complete-examples.md) that instruct an AI agent to import and use unknown, non-standard libraries such as react-hook-blog and @hookblog/resolvers/zod. These packages appear to be typosquatted variants of standard libraries like react-hook-form, which creates a significant supply chain risk if an agent or developer follows these instructions.
  • [METADATA_POISONING]: Significant portions of the skill's documentation and code examples are corrupted by a global text replacement error (changing 'form' to 'blog' and 'performance' to 'perblogance'). This results in the provision of invalid React/HTML syntax, such as the <blog> tag, and misleading guidance that degrades the safety and reliability of the skill's instructions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 29, 2026, 03:41 PM