litestar-htmx
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates how to ingest untrusted data from client-side HTMX headers (e.g.,
HX-Promptviarequest.htmx.prompt) into the application logic. This is an inherent part of the HTMX protocol and is documented here for functional implementation. * Ingestion points:request.htmx.promptandrequest.htmx.triggerare used inreferences/details-polling-and-testing.md. * Boundary markers: No delimiters or explicit safety instructions regarding these inputs are included in the code snippets. * Capability inventory: The examples demonstrate template rendering (HTMXTemplate) and resource deletion (delete_account) inreferences/details-polling-and-testing.md. * Sanitization: The provided code examples do not perform sanitization on these input values before using them in conditional logic. - [SAFE]: The skill follows best practices for the Litestar framework and only references official documentation at
docs.litestar.dev.
Audit Metadata