reskin
Warn
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: MEDIUMINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill uses dynamic module loading based on computed file paths. The scripts
capture-content.mjs,dom-equality.mjs,donor-probe.mjs, andslot-coverage.mjsall dynamically resolve and import thelive-session.mjsutility usingpathToFileURL. Furthermore,source-normalize.mjsdynamically imports user-defined ledger modules via the--normalizecommand-line argument.- [DYNAMIC_EXECUTION]: The skill requires the agent to programmatically generate and then execute custom renderer scripts (stardust/reskin/renderers/<archetype>.mjs) during Phase 4. This pattern of runtime code generation and subsequent execution increases the risk of unintended behaviors.- [DYNAMIC_EXECUTION]: Thecapture-content.mjsscript utilizeseval()to execute theIMG_VISIBLEpredicate string within the browser context during the page evaluation phase.- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes content from external, untrusted websites (<content-url>and--donor <url>) to build a content model. This data is then used by the agent to author a mapping brief and generate rendering logic, which provides an attack surface for indirect prompt injection. - Ingestion points: Data enters the system via
page.gotoincapture-content.mjsanddom-equality.mjs. - Boundary markers: None explicitly defined in the prompts; data is stored in
content-model.jsonstructures. - Capability inventory: The skill has file system access (
fs.writeFileSync), browser automation capabilities, and the ability to execute generated scripts. - Sanitization: The skill employs whitespace normalization and recommends HTML-escaping in the generated renderer, but the intermediate reasoning phase lacks robust sanitization against adversarial content.- [EXTERNAL_DOWNLOADS]: The skill setup requires the installation of the
impeccabledependency from a third-party GitHub repository (github.com/pbakaus/impeccable) and theplaywrightpackage vianpm.- [COMMAND_EXECUTION]: The skill procedure involves several shell commands, includingnpm install,python3 -m http.serverfor local prototype serving, and the execution of multiple project-local Node.js scripts.
Audit Metadata