frontend-design
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or unauthorized command execution were detected in the skill instructions or provided files. The content focuses on legitimate design principles and implementation standards.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data including project content and acceptance criteria to generate functional frontend code implementation.\n
- Ingestion points: External content and acceptance criteria are collected from the environment to inform the design and implementation process (SKILL.md).\n
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the guidelines for handling these external inputs.\n
- Capability inventory: The skill is designed to generate functional code (HTML/CSS/JS/React) and implement interactive elements based on provided instructions (SKILL.md).\n
- Sanitization: The instructions do not specify sanitization, validation, or escaping of the input data before it is translated into code implementation.
Audit Metadata