senior-frontend
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides functional utility for frontend development without malicious intent or dangerous operations.
- [PROMPT_INJECTION]: The bundle analyzer script processes external project files which constitutes an indirect prompt injection surface.
- Ingestion points:
scripts/bundle_analyzer.pyreadspackage.jsonand source code files from the user-specified project directory. - Boundary markers: No specific delimiters are used to wrap file content when it is presented to the agent.
- Capability inventory: The skill has the ability to create directories and write files via the
frontend_scaffolder.pyandcomponent_generator.pyscripts. - Sanitization: No sanitization is performed on project files before analysis; however, this is standard behavior for such developer tools and the risk is mitigated by the local context of the files.
- [EXTERNAL_DOWNLOADS]: The skill documentation includes instructions for installing dependencies from the official npm registry, which is an established and trusted service.
Audit Metadata