frontend-design
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- Prompt Injection (SAFE): The skill uses instructional markers like 'CRITICAL' and 'IMPORTANT', but these are strictly applied to design principles (e.g., execution of aesthetic vision) and do not attempt to bypass AI safety filters or override system constraints.
- Data Exposure & Exfiltration (SAFE): No sensitive file paths, credential patterns, or network communication commands (curl, wget, etc.) were detected.
- Unverifiable Dependencies (SAFE): The skill mentions the 'Motion library' (likely Framer Motion) as a suggestion for React development but does not include automated installation scripts or download external code.
- Indirect Prompt Injection (LOW): The skill accepts user-provided frontend requirements. While this represents an ingestion point for untrusted data, the skill lacks autonomous write or execute capabilities that would allow for exploitation. It primarily influences the reasoning and output style of the agent.
Audit Metadata