swiss-creative-mode-template

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from a DESIGN.md file to configure the layout and styles of the generated HTML template. This external ingestion point creates a surface for potential indirect prompt injection if the source file contains instructions designed to override agent behavior during the generation process.
  • Ingestion points: The skill reads an active DESIGN.md file to map palette, typography, and layout decisions into CSS variables as described in the SKILL.md workflow.
  • Boundary markers: The workflow does not specify the use of delimiters or 'ignore embedded instructions' warnings when processing the design file content.
  • Capability inventory: The skill is granted file_write capabilities to emit the index.html artifact.
  • Sanitization: There is no mention of validation or sanitization routines for the data extracted from the design file before it is interpolated into the generated code.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 08:01 PM