Security risk report for @forgecat/anthropics_claude-plugins-official_frontend-design v0.0.5
Source Integrity
Low
Profile claims official Anthropic origin with verifiable GitHub repository link and commit hash.
Metadata (author, license, platform compatibility) is consistent with legitimate Claude plugin ecosystem.
Agent Intent
Low
Content is purely instructional guidance for frontend design aesthetics and code generation—no prompt injection, role hijacking, or system prompt leakage attempts.
Guidance emphasizes legitimate design principles (typography, color, motion, spatial composition) and explicitly discourages generic AI patterns; this is constructive knowledge, not poisoning.
No instructions to read credentials, exfiltrate data, fetch external payloads, or hide/deny the skill's own instructions.
Details
Evidence
"Generates creative, polished code that avoids generic AI aesthetics."
"NEVER use generic AI-generated aesthetics like overused font families... cliched color schemes... predictable layouts."
"Interpret creatively and make unexpected choices that feel genuinely designed for the context."
Permissions
Low
No tools or MCP servers are declared; the skill is purely instructional guidance for code generation.
Authority is limited to generating frontend code (HTML/CSS/JS, React, Vue) in response to user requests—aligned with the stated purpose of UI/UX implementation.
Details
Evidence
"Declared tools: (none declared)"
"MCP servers: (none)"
Skill description: "Create distinctive, production-grade frontend interfaces with high design quality."
MCP Risk
Low
No MCP servers are defined in the profile.
No external binary execution, network access, or filesystem operations are configured.
ForgeCat