infographic-template-updater

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use rg (ripgrep) to verify the presence of template names across the repository.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing data that could influence the agent's output.
  • Ingestion points: Template keys and names are extracted from source files in src/templates/*.ts and src/templates/built-in.ts.
  • Boundary markers: None are explicitly specified in the instructions to separate template data from instructions.
  • Capability inventory: The skill performs file system reads and writes to multiple project locations, including SKILL.md and UI component files, and executes shell search commands.
  • Sanitization: No specific validation or escaping mechanisms are described for the template names retrieved from the source code before they are written to target files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 05:51 AM