agency-grid-layout-minimal
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlcontains the design's HTML structure encoded as a Base64 string. This is a standard packaging method for the Neuform design preview environment. - [DYNAMIC_EXECUTION]: The skill employs
srcdocwithin an iframe to dynamically load and render the decoded HTML design, facilitating a sandboxed preview of the design system. - [EXTERNAL_DOWNLOADS]: The demo references external dependencies from well-known and established services, including Tailwind CSS, the GSAP animation library via Cloudflare, and Iconify icons.
- [INDIRECT_PROMPT_INJECTION]: The skill's demo prompts instruct the agent to reference an external URL for design fidelity.
- Ingestion points: The agent is directed to use a Neuform reference URL in
demo/PROMPT.mdto guide the design process. - Boundary markers: No explicit boundary markers or 'ignore' instructions are provided for the external content.
- Capability inventory: The skill itself consists of design instructions and a static HTML demo; it does not possess system-level write or command execution capabilities.
- Sanitization: The skill relies on the agent's internal safety filters for processing the external reference content.
Audit Metadata