frontend-design-ultimate
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides automated shell scripts (
init-vite.sh,init-nextjs.sh,bundle-artifact.sh) to streamline the creation of frontend projects. These scripts execute standard development commands likenpm installandnpx, operating within the user-defined project directory. - [EXTERNAL_DOWNLOADS]: The initialization scripts fetch official dependencies and scaffolding tools (such as
create-next-app,create-vite, andshadcn-ui) from the public npm registry. These are well-known technology tools and do not represent a security risk. - [PROMPT_INJECTION]: The instructions in
SKILL.mdare focused on design philosophy and technical implementation. There are no patterns suggesting attempts to bypass AI safety filters or override system-level constraints. - [DATA_EXFILTRATION]: No evidence of hardcoded credentials, sensitive file access, or unauthorized network operations was found. The skill operates entirely on local project files.
- [NO_CODE]: The skill includes executable shell scripts meant to be run by the user to initialize and bundle projects, but the skill logic itself is primarily instruction-based.
Audit Metadata