litestar-htmx

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill demonstrates how to ingest untrusted data from client-side HTMX headers (e.g., HX-Prompt via request.htmx.prompt) into the application logic. This is an inherent part of the HTMX protocol and is documented here for functional implementation. * Ingestion points: request.htmx.prompt and request.htmx.trigger are used in references/details-polling-and-testing.md. * Boundary markers: No delimiters or explicit safety instructions regarding these inputs are included in the code snippets. * Capability inventory: The examples demonstrate template rendering (HTMXTemplate) and resource deletion (delete_account) in references/details-polling-and-testing.md. * Sanitization: The provided code examples do not perform sanitization on these input values before using them in conditional logic.
  • [SAFE]: The skill follows best practices for the Litestar framework and only references official documentation at docs.litestar.dev.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 02:55 PM