frontend-security-baseline
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted source code, HTTP headers, and configuration files provided by a user, which represents a surface for indirect prompt injection. Malicious instructions embedded within the audited content could attempt to manipulate the agent's findings or recommendations. \n
- Ingestion points: Untrusted data enters the agent context through the project files and configurations identified for review as described in the
SKILL.mdusage section. \n - Boundary markers: The skill does not provide instructions to wrap the audited content in delimiters or include explicit "ignore embedded instructions" warnings for the agent. \n
- Capability inventory: The skill's capabilities include suggesting code patches and providing verification probes (e.g.,
rgcommands) to the user. \n - Sanitization: The skill does not define any validation, filtering, or escaping mechanisms for the external content before it is processed by the agent.
Audit Metadata