rapid-prototype
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references popular front-end libraries such as Tailwind CSS, Chart.js, and Sortable.js hosted on well-known CDN services like jsDelivr and Unpkg.
- [COMMAND_EXECUTION]: Utilizes the
openshell command to facilitate browser previews of the locally generated prototype files indocs/prototypes/. - [REMOTE_CODE_EXECUTION]: Generates standalone HTML files that include JavaScript for dynamic functionality, which is required for the skill's primary prototyping purpose.
- [PROMPT_INJECTION]: Indirect prompt injection surface evaluation: 1. Ingestion points: User instructions and iterative feedback for demo creation. 2. Boundary markers: Absent. 3. Capability inventory: File system writes and shell execution of the
opencommand. 4. Sanitization: Absent; however, the risk is mitigated by the local-only scope and developer-oriented context.
Audit Metadata