documentary-brutalist-agency
Fail
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
REFERENCES.mdfile includes a link todrukstudio.framer.website. Automated security scans have flagged this specific subdomain for phishing. Although Framer is a well-known web design platform, the specific reference site is identified as having a poor reputation. - [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface where untrusted user input is interpolated into generated web templates.
- Ingestion points: The
demo/PROMPT.mdfile encourages the agent to use the skill to create content for different studios, architecture offices, or production companies, replacing projects, identities, and names. - Boundary markers: There are no explicit instructions or delimiters in the
SKILL.mdordemo/index.htmlfiles to warn the agent about potential instructions embedded within the user-provided project data. - Capability inventory: The skill generates functional
index.htmlfiles containing inline CSS and JavaScript (demo/index.html). If a user provides a malicious project name or description containing script tags or event handlers, it could lead to Cross-Site Scripting (XSS) in the generated site. - Sanitization: The skill lacks instructions for sanitizing, escaping, or validating the external content before it is placed into the HTML structure.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata