hugagent-frontend-dev
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a development guide and template repository for the HugAgentOS project, defining directory structures and component specifications.
- [COMMAND_EXECUTION]: The skill includes a shell script (
scaffold_component.sh) designed to automate the creation of React components and CSS modules. The script uses placeholders and standard Unix utilities to assist in development workflows within the project directory. - [INDIRECT_PROMPT_INJECTION]: The documentation details the handling of Server-Sent Events (SSE) from the backend. While this represents a common attack surface for AI agents receiving external data, the skill provides specific schemas and segment-based rendering logic that helps maintain proper data boundaries.
- [DATA_EXPOSURE]: Defines standard patterns for utilizing
localStoragefor UI state persistence andauthFetchwith Bearer tokens for session management, adhering to established frontend security practices.
Audit Metadata