frontend-layout-extractor
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted source code without isolation or sanitization.
- Ingestion points: Path to the component or module source code.
- Boundary markers: The prompt lacks explicit delimiters or instructions to the agent to ignore any embedded instructions within the source files.
- Capability inventory: The skill instructs the agent to perform filesystem write and directory creation operations.
- Sanitization: No input validation or filtering of the source code content is specified.
- [COMMAND_EXECUTION]: The skill directs the agent to create directories and write files to the local disk at paths constructed from a user-supplied feature name.
Audit Metadata