registry / frontend-standard-skills / 1.0.0

frontend-standard-skills@1.0.0

Installable AI skills and enforceable rule files that make Claude Code, Cursor, and other AI coding tools produce accessible, performant (Core Web Vitals-optimized), and consistent frontend code across HTML/CSS, React, Next.js, Nuxt, Astro, Angular, Vue.j

AI Security Review

scanned 1d ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs `npx frontend-standard-skills add <stack>` with an optional `--dir`.

Impact

Can influence coding-agent behavior within the user-selected project.

Mechanism

Copies bundled skills and writes marked rule sections to project AI-agent configuration files.

Rationale

The scanner's lifecycle finding is a false positive for blocking: the only install hook prints text. The explicit project-level agent-config mutation warrants a warning under policy, not a malicious verdict.

Evidence

package.jsonbin/cli.jsskills/react/assets/RULES.mdskills/core-standards/assets/RULES.md.claude-plugin/marketplace.jsonskills/<stack>/<targetDir>/.claude/skills/<stack>/<targetDir>/.cursor/rules/<stack>-frontend-standards.mdc<targetDir>/CLAUDE.md<targetDir>/AGENTS.md

Decision evidence

public snapshot

frontend-standard-skills@1.0.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code