replica
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external websites intended for migration.
- Ingestion points:
Phase 1 (Extract)inSKILL.mdand data processing injson-query.mjsandhtml-slice.mjsingest structure and content from live URLs. - Boundary markers: Utilizes Markdown structural elements and JSON table formatting to separate data.
- Capability inventory: The skill has broad capabilities including network requests via Playwright, file system writes, shell script execution (
gate.sh), and deployment to Adobe's AEM production environment. - Sanitization:
html-slice.mjsperforms aggressive cleaning of captured HTML by removing<script>,<style>, and other non-structural elements. - [COMMAND_EXECUTION]: Orchestration of the migration phases involves executing local scripts and system commands.
- Evidence:
gate.shcoordinates various diagnostic tools;run-bg.mjsandrun-capped.mjsutilizechild_process.spawnto manage concurrent tasks and enforce operational timeouts. - [EXTERNAL_DOWNLOADS]: The skill manages the installation of necessary development and comparison tools.
- Evidence:
SKILL.mdspecifies the installation ofplaywright,pixelmatch,pngjs, andcheeriovianpmif they are not already present in the environment.
Audit Metadata