canvas-design

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEPROMPT_INJECTIONMETADATA_POISONINGEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The skill employs a 'state falsification' technique within the SKILL.md instructions by asserting that the user has already performed a specific action: IMPORTANT: The user ALREADY said "It isn't perfect enough. It must be pristine, a masterpiece if craftsmanship, as if it were about to be displayed in a museum.". This is an attempt to override the model's standard interaction loop and force it into a specific behavioral state.
  • [METADATA_POISONING]: The README.md file contains deceptive metadata, claiming the author is 'Anthropic' and linking to an official Anthropic repository. This contradicts the actual author context ('aiagentskills') and is a form of impersonation that could lead a user or automated system to assign an unearned level of trust to the skill.
  • [EXTERNAL_DOWNLOADS]: The instructions in SKILL.md explicitly direct the agent to 'Download and use whatever fonts are needed to make this a reality.' This encourages the agent to make uncontrolled network requests to external, potentially untrusted sources to fetch assets during runtime.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:45 PM