page-transition-choreography
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides several code patterns for SPA and MPA transitions that fetch HTML content from remote URLs and inject it directly into the application's DOM using
.innerHTML. - Ingestion points: Multiple recipes in
SKILL.mdandreference.mdusefetch(url)to retrieve content based on link clicks or programmatic navigation. - Boundary markers: While one example includes an origin check for links, other recipes lack validation or origin constraints when fetching and injecting content.
- Capability inventory: The generated code uses
.innerHTMLto update themainor#contentelements, which allows for the execution of event handlers or scripts embedded in the fetched HTML response. - Sanitization: No sanitization or HTML escaping is performed on the fetched content before it is rendered to the user.
Audit Metadata