skills/sickn33/agentic-awesome-skills/frontend-mobile-development-component-scaffold/Gen Agent Trust Hub
frontend-mobile-development-component-scaffold
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill ingests user requirements through the $ARGUMENTS placeholder to drive its code generation logic but lacks explicit boundary markers or delimiters to isolate untrusted input. This absence creates a vulnerability surface for indirect prompt injection if the user-supplied specifications contain malicious instructions.\n- Ingestion points: The $ARGUMENTS variable used in the Requirements section and processed by the ComponentAnalyzer.\n- Boundary markers: No delimiters or instructions are present to differentiate user content from the skill's operational instructions.\n- Capability inventory: The skill is designed to generate multiple files including component source code, stylesheets, and test suites.\n- Sanitization: There is no explicit logic provided to sanitize or validate the user-supplied input before it is interpolated into the generated code templates.
Audit Metadata