recipe-front-review
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as an orchestrator for frontend development workflows, utilizing subagents for compliance and security auditing.
- [SAFE]: It interacts only with local files, such as design documents in
docs/design/and project source code, using common utilities likelsandgit diff. - [SAFE]: Security safeguards are integrated into the workflow, including logic to block further actions if the security reviewer identifies high-risk issues.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it reads and processes local files to provide them to subagents. This surface is inherent to the skill's primary function of code review. Ingestion points are the design documentation and source code files. There are no specific boundary markers or sanitization routines mentioned, but the operations are contained within the local environment.
Audit Metadata