pretext
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill imports JavaScript libraries such as @chenglou/pretext, gsap, and lil-gui, as well as font files from well-known CDNs like esm.sh and jsdelivr.net. These references are standard for web development and demo creation.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text to generate interactive demos. The provided templates demonstrate security awareness by utilizing the escapeHTML function for DOM-based rendering and leveraging the HTML5 Canvas API for text rendering, which naturally prevents common HTML injection vulnerabilities.
Audit Metadata