scroll-video-chapters
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements a data-driven UI architecture where chapter labels and overlay text are rendered into the DOM using innerHTML. This approach creates a vulnerability surface for indirect prompt injection (XSS) if the CHAPTERS data array is ever modified to include content from an untrusted source.
- Ingestion points: The CHAPTERS constant in chapters.js serves as the primary data ingestion point for the UI components.
- Boundary markers: The implementation lacks boundary markers or explicit warnings to distinguish between safe text data and potentially executable HTML instructions.
- Capability inventory: The skill utilizes innerHTML within the init() and initReduced() functions in chapters.js to dynamically generate overlay and navigation elements.
- Sanitization: There is no evidence of sanitization or escaping of the label and overlay fields before they are rendered, which would be necessary to prevent script execution from untrusted data.
- [EXTERNAL_DOWNLOADS]: The skill references and loads external JavaScript dependencies from a well-known content delivery network.
- Evidence: The index.html file includes script tags that load the gsap and ScrollTrigger libraries from cdn.jsdelivr.net.
Audit Metadata