canvas-banner-designer-acrazie
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and associated runtime contract mandate security best practices, such as avoiding the inclusion of telemetry, external fonts, or remote scripts, and respecting the host project's Content Security Policy.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied references and external URLs to inform its design tasks. This is a functional requirement of the skill and is handled with instructions that prioritize visual interpretation over code execution from untrusted sources. This surface is considered safe given the skill's specific focus and mitigating instructions.
- [DYNAMIC_EXECUTION]: The skill's primary function is generating HTML and JavaScript code. It includes robust requirements for the generated code's lifecycle, ensuring that all animation loops and event listeners are properly disposed of to prevent memory leaks or unexpected behavior. This is intended functionality and follows safe development practices.
Audit Metadata