frontend-design
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill involves a multi-step data flow where instructions and data are passed between an orchestrator and subagents.
- Ingestion points: The
research subagentexplores the project codebase inSKILL.md, whileimplementation.mdandevaluation.mdingest thebrief.mdand generated HTML. - Boundary markers: No explicit delimiter markers are specified in the instructions for content separation.
- Capability inventory: The skill has capabilities for file writing, directory creation, subagent spawning, image generation, and browser automation.
- Sanitization: No explicit sanitization logic is described for data passed between orchestration stages.
- [COMMAND_EXECUTION]: The orchestrator executes shell commands (
mktempor PowerShellNew-Item) to create temporary directories for session state management. These are standard operations for local environment orchestration. - [EXTERNAL_DOWNLOADS]: The implementation subagent is instructed to use well-known CDN services (e.g., Google Fonts) for design assets. This is standard practice in web development and does not involve untrusted code execution.
Audit Metadata