theme-factory
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious executable code, network requests, or unauthorized file access patterns were detected. The skill consists of static theme configurations and documentation.
- [PROMPT_INJECTION]: The skill processes user-provided artifacts and custom theme descriptions, which constitutes a surface for indirect prompt injection where malicious instructions could be embedded in data.
- Ingestion points: Reading and styling user-provided artifacts (documents, slides) and processing natural language inputs for custom themes as described in SKILL.md.
- Boundary markers: None identified in the skill instructions.
- Capability inventory: Limited to reading theme configuration files from the local themes/ directory.
- Sanitization: No explicit validation or sanitization of the content within the processed artifacts or the custom theme descriptions is mentioned.
Audit Metadata