authoring-analysis

Pass

Audited by Gen Agent Trust Hub on Oct 30, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill instructs the agent to execute a Node.js script located at a relative path: node <SKILL_DIR>/../block-collection-and-party/scripts/get-block-structure.js.
  • Evidence: The script is used in Step 3d to fetch HTML structures for blocks like 'cards', 'tabs', 'accordion', and 'columns'.
  • Context: The script is part of the vendor's (Adobe) internal toolset for AEM Edge Delivery Services.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could contain malicious instructions designed to manipulate the agent's decision-making process.
  • Ingestion points: Content sequences extracted from scraped web pages and a visual reference file (screenshot.png) mentioned in the prerequisites.
  • Boundary markers: The instructions do not specify any delimiters or safety markers to isolate the content being analyzed from the agent's instructions.
  • Capability inventory: The skill has the ability to execute shell commands (node) and invoke other functional skills based on its analysis.
  • Sanitization: There is no evidence of sanitization or validation for the incoming text or image content.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 30, 2026, 10:27 AM