Frontend Security Review

• Outcome: Pass
• Latest audit: Jun 1, 2026, 11:27 AM
• Version:
  2.4.0

Overview

This is a documentation-only frontend security review skill with a small routing-scope caveat but no hidden execution, exfiltration, or privileged behavior.

Install this if you want an agent to review frontend code for common client-side security risks and write a local report. Treat its findings as review assistance, especially for frontend issues, and use a broader application-security review for backend, infrastructure, malware, or production incident analysis.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The description is broad enough to attract general security-review requests beyond a strictly frontend context, which can cause inappropriate skill routing and over-trust in a specialized workflow. In a security-review skill, scope ambiguity is more dangerous because users may rely on it for authoritative guidance on issues outside its competence, leading to missed risks or incomplete analysis.

VirusTotal

62/62 vendors flagged this skill as clean.