svg-logo-maker
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the svg.js library from the JSDelivr CDN (cdn.jsdelivr.net) within the generated HTML workspace to support programmatic SVG construction.\n- [DYNAMIC_EXECUTION]: The skill generates a local HTML workspace (_logo-workspace.html) containing JavaScript logic to render logos and uses the browser_navigate tool to execute this code locally for visual verification.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided brand details and logo requirements which are interpolated into the design prompt and the visual workspace without explicit sanitization.\n
- Ingestion points: Brand name, mission, and brand adjectives gathered during Phase 1 in SKILL.md.\n
- Boundary markers: None identified to delimit user-provided text from the skill's internal logic or generated HTML code.\n
- Capability inventory: The skill utilizes browser tools to render and capture images and file tools to save the final vector assets.\n
- Sanitization: No specific escaping or validation of user-supplied brand identity strings is described before they are included in the visual workspace.
Audit Metadata