rapid-prototype

Pass

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references popular front-end libraries such as Tailwind CSS, Chart.js, and Sortable.js hosted on well-known CDN services like jsDelivr and Unpkg.
  • [COMMAND_EXECUTION]: Utilizes the open shell command to facilitate browser previews of the locally generated prototype files in docs/prototypes/.
  • [REMOTE_CODE_EXECUTION]: Generates standalone HTML files that include JavaScript for dynamic functionality, which is required for the skill's primary prototyping purpose.
  • [PROMPT_INJECTION]: Indirect prompt injection surface evaluation: 1. Ingestion points: User instructions and iterative feedback for demo creation. 2. Boundary markers: Absent. 3. Capability inventory: File system writes and shell execution of the open command. 4. Sanitization: Absent; however, the risk is mitigated by the local-only scope and developer-oriented context.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 9, 2026, 01:34 PM