skills/sickn33/agentic-awesome-skills/frontend-mobile-development-component-scaffold/Gen Agent Trust Hub
frontend-mobile-development-component-scaffold
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill accepts user requirements via $ARGUMENTS and interpolates them into code templates. This creates a potential surface for indirect prompt injection if malicious input is provided. However, the skill explicitly instructs the agent to validate component and property identifiers and to serialize values safely rather than inserting untrusted text directly into the source. \n
- Ingestion points: Requirements section via $ARGUMENTS.\n
- Boundary markers: Explicit instructions to validate and serialize safely are provided in the instructions section.\n
- Capability inventory: The skill facilitates file generation (component code, tests, styles) which is typically written to the local filesystem by the agent.\n
- Sanitization: Direct instructions are given to the agent to sanitize and validate input before generation.\n- [DYNAMIC_EXECUTION]: The skill uses templates to generate executable TypeScript and JavaScript code. This is the primary function of a scaffolding tool and is performed using string assembly from local, hardcoded templates. There is no evidence of dynamic execution of remote or untrusted code within the skill itself.
Audit Metadata