hero-terminal-typewriter
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references Prism.js core library, language components, and CSS themes hosted on the JSDelivr CDN (cdn.jsdelivr.net). JSDelivr is a well-known service for delivering open-source assets and is considered a safe source.
- [INDIRECT_PROMPT_INJECTION]: The terminal simulation logic provides a potential attack surface for indirect injection if used to render untrusted data, though it includes built-in mitigations.
- Ingestion points: Text data is passed through the
addCommand(text)andaddOutput(text)methods within theTerminalTyperclass inSKILL.md. - Boundary markers: None provided in the implementation code.
- Capability inventory: The component uses
innerHTMLto render commands and output strings to facilitate syntax highlighting within the browser DOM. - Sanitization: The implementation includes a robust
_escapeHtmlutility that uses a temporary DOM element and thetextContentproperty to ensure that all raw text is properly escaped before being rendered as HTML, effectively mitigating standard XSS vectors.
Audit Metadata