frontend-design
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has a potential surface for indirect prompt injection as it takes untrusted user input to generate executable code.
- Ingestion points: The skill processes user-provided "frontend requirements" (component, page, or application descriptions) as described in
SKILL.md. - Boundary markers: There are no explicit boundary markers or instructions for the agent to ignore potentially malicious instructions embedded within the user-provided requirements.
- Capability inventory: The skill instructions lead to the generation of functional frontend code (HTML/CSS/JS, React, Vue) which can include script execution.
- Sanitization: The instructions do not define any sanitization, filtering, or validation steps for the user-provided content before it is interpolated into the generated code.
Audit Metadata