after-hours-editorial-template
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches assets from well-known and reputable services, including typography from Google Fonts (
fonts.googleapis.com) and the GSAP animation library from the jsDelivr CDN (cdn.jsdelivr.net). These are standard dependencies for high-end web presentation templates. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by ingesting data from
DESIGN.mdto customize styling. - Ingestion points: The
DESIGN.mdfile is read during the workflow to map style variables. - Boundary markers: None explicitly defined in the instructions.
- Capability inventory: The skill uses
file_writeto generate the finalindex.htmlartifact. - Sanitization: The skill mitigates risk by restricting the use of external data to specific CSS variable mappings (colors, fonts, layout rhythm) within a predefined dark editorial baseline.
Audit Metadata