dineway-building-site
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides documentation for site development and deployment. It demonstrates proper security hygiene, such as using environment variables for sensitive data (S3 keys, database tokens) and avoiding hardcoded credentials.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external content which presents a vulnerability surface for indirect prompt injection.
- Ingestion points: Reads content entries from the CMS database, search queries from URL parameters, and user-submitted comments.
- Boundary markers: The
PortableTextcomponent provides a structured rendering boundary for rich text. Content for RSS feeds is wrapped in XML tags with explicit escaping. - Capability inventory: The skill facilitates file writing (type generation), network operations (S3 storage integration), and media downloads, all controlled by the developer configuration.
- Sanitization: Demonstrates the use of
escapeXmlfor text interpolation in RSS feeds and uses structured data components that prevent direct rendering of raw HTML/scripts. - [EXTERNAL_DOWNLOADS]: The site seeding process includes functionality to download and localize remote media assets based on URLs provided in configuration files. This is a documented feature of the Dineway tooling for content management.
Audit Metadata