landing-page-creator
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the web using
web_searchandweb_browseto populate landing page sections. - Ingestion points: External search results retrieved during the product research phase in
SKILL.mdStep 1. - Boundary markers: None provided in the instructions for the ingested search data.
- Capability inventory:
web_search,web_browse, and HTML file generation. - Sanitization: No specific sanitization or escaping instructions are provided for the external data before it is interpolated into the HTML output.
- [EXTERNAL_DOWNLOADS]: The skill references well-known platforms like Netlify and Vercel for deployment purposes and includes links to the vendor's domain (
openaffiliate.dev). These are documented neutrally and align with the skill's stated purpose.
Audit Metadata