xiaohei-illustrations
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external, untrusted content including articles, web links, and Notion pages to derive illustration strategies and visual metaphors.
- Ingestion points: Workflow step 1 in SKILL.md instructs the agent to read user-provided articles, links, and Notion pages.
- Boundary markers: The instructions do not define delimiters or specific system messages to isolate external data from internal instructions.
- Capability inventory: The skill performs image generation and writes files to the local assets/ directory.
- Sanitization: No escaping, validation, or sanitization of external content is specified before it is processed by the agent.
Audit Metadata