sens-frontend-design
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill generates HTML files that load resources from well-known services, specifically Tailwind CSS via
cdn.tailwindcss.comand Google Fonts viafonts.googleapis.com. These are used for project styling and are standard in web development. - [INDIRECT_PROMPT_INJECTION]: The core functionality involves an agent reading multiple markdown files in the
Design/directory to generate functional HTML/JS prototypes. This creates a surface where instructions hidden in design specifications could influence the agent's code generation behavior. - Ingestion points: Files including
DIRECTION.md,PAGE-WORKFLOW.md, andPROMPTS.mdare processed by the agent. - Boundary markers: The provided templates do not utilize specific delimiters or instructions to differentiate between design data and procedural instructions for the agent.
- Capability inventory: The skill allows the use of
WriteandEdittools to create and modify executable frontend code. - Sanitization: There are no prescribed sanitization or validation steps for the design input before it is consumed by the code-generation logic.
Audit Metadata