Security risk report for @forgecat/openai_skills_frontend-skill v0.0.11
Source Integrity
Low
Profile claims origin from OpenAI's official skills repository (GitHub: openai/skills) with a specific commit hash and Apache-2.0 license.
Metadata is consistent with a legitimate, curated skill published by a known organization; no typosquatting, obfuscation, or suspicious supply-chain indicators detected.
Agent Intent
Low
Content is a legitimate design guidance document describing UI/UX best practices for landing pages, apps, and prototypes—no instructions to manipulate the AI, ignore system prompts, or perform malicious actions.
No prompt injection, role hijacking, credential exfiltration, system prompt leakage, or guidance poisoning detected; the skill teaches restrained composition and visual hierarchy, which are standard design principles.
No instructions to fetch external URLs, install backdoored dependencies, weaken security defaults, or install persistent biased rules that would steer future outputs toward attacker goals.
Details
Evidence
Entire content is design methodology: 'Start with composition, not components', 'Prefer a full-bleed hero', 'Limit the system: two typefaces max'.
No references to reading files, environment variables, or exfiltrating data.
No hidden instructions or role-hijacking language; all guidance is openly stated as design principles.
Permissions
Low
No tools or skills are declared in the profile; the skill is purely instructional guidance for the AI to follow when designing frontend interfaces.
No file system access, shell execution, network requests, or excessive agency is requested or implied.
Authority is narrowly scoped to design recommendations and does not exceed the stated purpose of creating visually strong landing pages and UIs.
Details
Evidence
Profile declares 'Dependencies: None' and no MCP servers or tool definitions are present.
All content is guidance text; no alwaysApply rules, globs, or high-risk tool categories are invoked.
MCP Risk
Low
No MCP servers are defined in the profile; the skill contains only markdown documentation and design guidance.
No binary execution, network access, filesystem operations, or environment credentials are required or referenced.
ForgeCat