card-news-generator-v2

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied topics, titles, and descriptions to generate PNG image files. * Ingestion points: content is ingested through sys.stdin in auto_generator.py, interactive user input in interactive_generator.py, and command-line arguments in generate_card.py. * Boundary markers: The skill does not implement delimiters or 'ignore' instructions to separate user data from processing logic. * Capability inventory: The skill utilizes the Pillow library to perform file system writes and os.makedirs to create directories. * Sanitization: Input text is formatted for layout using textwrap but is not sanitized to remove potential prompt injection markers that could influence an agent if the output text were ever re-parsed.
  • [COMMAND_EXECUTION]: Documentation files like README.md and QUICKSTART_KR.md provide instructions for the user to execute sudo apt-get commands to install Korean font packages required for the skill to function properly.
  • [EXTERNAL_DOWNLOADS]: The skill identifies dependencies on the Pillow Python package and Noto CJK fonts, which are fetched from official package registries (PyPI and Ubuntu repositories).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 03:56 PM