frame-light-leak-cinema
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses standard HTML and CSS to create a visual template for cinematic frames.- [EXTERNAL_DOWNLOADS]: The skill loads styling and typography resources from well-known service providers.
- Resources: Google Fonts (fonts.googleapis.com) and Tailwind CSS (cdn.tailwindcss.com) are used to provide the visual presentation.- [INDIRECT_PROMPT_INJECTION]: The skill takes user-provided titles and metadata and embeds them into an HTML template for rendering. This constitutes an injection surface, but the risk is minimized by the skill's limited capabilities.
- Ingestion points: User-supplied titles, subtitles, and metadata in SKILL.md.
- Boundary markers: Absent.
- Capability inventory: Limited to HTML/CSS rendering; no subprocess execution or network exfiltration capabilities were identified.
- Sanitization: No explicit sanitization of user content is described.
Audit Metadata