visual-page
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from various external sources (SKILL.md).
- Ingestion points: The skill accepts plain-language briefs, ad creatives, screenshots, and reference URLs as inputs (SKILL.md).
- Boundary markers: There are no explicit delimiters or boundary markers defined in the instructions to prevent the agent from executing instructions potentially embedded in these external inputs.
- Capability inventory: The skill has significant capabilities including generating source HTML via the 'generate' tool and accessing Shopify commerce catalogs (SKILL.md).
- Sanitization: The skill does not specify any sanitization, filtering, or validation steps for the content fetched from reference URLs or provided in briefs before it is used for page generation.
Audit Metadata