oneshot-website
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill generates a local HTML file containing JavaScript and subsequently executes a shell command (
open index.html) to launch the file in the default browser for previewing. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input to generate executable code. 1. Ingestion points: The
$ARGUMENTSvariable inoneshot-website.mdaccepts arbitrary user-supplied themes. 2. Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used when interpolating the theme into the generation prompt. 3. Capability inventory: The skill writes to the file system (index.htmlinoneshot-website.md) and executes a shell command (openinoneshot-website.md). 4. Sanitization: No sanitization or validation of the user-provided theme is performed before it is used to construct the website's source code. - [EXTERNAL_DOWNLOADS]: The skill references font assets from Google Fonts, a well-known service, using CSS
@importstatements.
Audit Metadata