frontend-interaction-review
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, credential exposure, or persistence mechanisms were detected. The skill provides purely instructional content for code review tasks.- [PROMPT_INJECTION]: Indirect Prompt Injection Surface Analysis:
- Ingestion points: The skill is designed to ingest and analyze external CSS, HTML, and JavaScript code provided by the user (SKILL.md).
- Boundary markers: The instructions do not specify any delimiters (like XML tags) to isolate analyzed code from instructions.
- Capability inventory: The skill possesses no capabilities for command execution, file system writes, or network operations. Its primary function is to output a text-based summary of findings.
- Sanitization: No validation or sanitization of input data is performed.
- Risk: The risk is assessed as negligible because the skill lacks the capabilities (exec/eval, network access, or disk writes) required for an attacker to achieve impact through injected data.- [SAFE]: The skill references external documentation from the W3C, Floating UI, and the well-known 'github-markdown-css' repository for informational and baseline purposes. These references are to trusted and well-known sources and do not involve remote code execution.
Audit Metadata