frontend-design
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references typography assets from well-known services, specifically Google Fonts and Fontshare, which is a standard practice for frontend design.
- [COMMAND_EXECUTION]: The documentation provides a shell command for the user to manually install the skill by cloning the author's official GitHub repository.
- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface by design, as it reads branding information from a local configuration file. 1. Ingestion points: Reads 'brand-profile.json' from the project directory. 2. Boundary markers: Absent; instructions do not specify delimiters for the ingested JSON data. 3. Capability inventory: Generates HTML, CSS, JavaScript, and React code based on the ingested profile. 4. Sanitization: Absent; the skill trusts the local brand profile content for design parameters.
Audit Metadata