forge-palette
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from a local configuration file. 1. Ingestion points: .forge.json. 2. Boundary markers: Absent. 3. Capability inventory: Updates .forge.json and CSS custom properties. 4. Sanitization: None specified.
- [SAFE]: Analysis of the skill instructions and metadata reveals no evidence of malicious patterns such as prompt injection, data exfiltration, or unauthorized code execution. The skill remains within its documented scope of color palette generation.
Audit Metadata