poster-hero
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's example implementation loads the Tailwind CSS framework from 'cdn.tailwindcss.com' and typography from Google Fonts ('fonts.googleapis.com'). These are recognized well-known services commonly used for front-end development.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the transformation of user-provided content into a visual poster format, which constitutes a potential surface for indirect prompt injection.
- Ingestion points: User-supplied marketing text and data are processed according to the template rules defined in 'SKILL.md'.
- Boundary markers: The instructions do not prescribe the use of delimiters or explicit 'ignore' instructions for the ingested data.
- Capability inventory: The skill's capabilities are limited to generating visual HTML and CSS structures for rendering.
- Sanitization: No specific input sanitization, filtering, or escaping mechanisms are defined in the template instructions.
Audit Metadata