Back to skill

Security audit

Js Design

Security checks for vulnerabilities and agentic risk

Overview

This is a narrow instruction-only skill for summarizing public js.design pages, with no credential use, write access, persistence, or executable code.

Use this skill only with public js.design links or content you are comfortable summarizing. Review extracted names, links, design annotations, and resource URLs before sharing them outside your team.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.