pixi-scene-dom-container
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate instructional content for the PixiJS v8 library, explaining how to overlay HTML elements on a canvas using the DOMContainer API.- [PROMPT_INJECTION]: The skill contains an implementation pattern identified as an indirect prompt injection surface (Category 8) due to the use of innerHTML in code examples. * Ingestion points: The example in SKILL.md demonstrates setting properties on HTMLElement.innerHTML. * Boundary markers: No explicit delimiters or warnings against processing untrusted data are present in the code snippets. * Capability inventory: The skill enables the creation and manipulation of HTML elements that overlay the rendering canvas. * Sanitization: The provided examples use static strings and do not demonstrate escaping or validation techniques for dynamic content.
Audit Metadata