webinar-registration-page
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided details such as event titles, presenter bios, and topics, embedding them directly into a generated HTML file.
- Ingestion points: User-provided event details gathered in Step 1 of SKILL.md.
- Boundary markers: Absent; user input is interpolated into HTML/JS templates without clear delimiters.
- Capability inventory: The skill utilizes file-writing capabilities to save the generated [webinar-slug]-registration.html file.
- Sanitization: No explicit sanitization or validation of the user-provided data is performed.
- [DYNAMIC_EXECUTION]: The skill generates JavaScript code for a countdown timer based on user-supplied dates.
- Evidence: JavaScript template in SKILL.md Step 3 includes a script block populated by user input.
Audit Metadata