doc-kami-parchment
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to transform user-supplied content and data into formatted documents, which represents a vulnerability surface for indirect prompt injection.
- Ingestion points: External user content and data provided to the agent (e.g., through the prompt in SKILL.md).
- Boundary markers: The skill's instructions do not specify any delimiters or warnings to isolate ingested content.
- Capability inventory: The skill involves generating HTML and Markdown content for rendering and potential export.
- Sanitization: There are no explicit instructions to sanitize or escape user-provided content during the document generation process.
- [EXTERNAL_DOWNLOADS]: The skill fetches styling assets from external sources.
- Evidence: The template in
example.htmlloads the Tailwind CSS library fromcdn.tailwindcss.comand typography from Google Fonts (fonts.googleapis.com). - Note: These are standard assets from well-known service providers used for document layout and design.
Audit Metadata