swiss-poster
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references Google Fonts (fonts.googleapis.com) and the Tailwind CSS library via its official CDN (cdn.tailwindcss.com) to provide typographic and styling assets. These are well-known, established services for web development.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and style user-supplied content, which creates a potential surface for instructions embedded in that data.
- Ingestion points: User-provided text, tweets, or facts processed for component generation as described in SKILL.md and references/prompting.md.
- Boundary markers: The skill does not define specific security delimiters for user input, though it mandates 'protected reading zones' as a visual design rule to ensure readability.
- Capability inventory: The skill does not invoke any high-risk tools or scripts. Its primary function is to generate HTML and Tailwind CSS code for display purposes.
- Sanitization: No specific sanitization or filtering of external content is specified in the instructions.
Audit Metadata