ape-explain
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill generates static HTML files locally. It uses well-known and trusted CDNs (Google Fonts, cdnjs for KaTeX) which falls under the trusted sources rule.
- [SAFE]: No suspicious command execution, privilege escalation, or persistence mechanisms were detected. The use of WebSearch is scoped to educational research.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied concepts to generate articles. While this is an ingestion point for untrusted data, the output is a static HTML file intended for human reading, and the instructions emphasize strict formatting and simple language, which naturally limits the impact of embedded instructions in the input data. Severity remains low.
- [DYNAMIC_EXECUTION]: The skill generates HTML containing JavaScript for animations and interactives. This is the primary purpose of the skill and uses standard web technologies (Canvas, SVG, requestAnimationFrame). The logic is self-contained and does not incorporate untrusted remote scripts at runtime.
Audit Metadata