building-emdash-site

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for using developer CLI tools, such as pnpm dev for starting a development server and npx emdash for type generation and database seeding.\n- [EXTERNAL_DOWNLOADS]: The documentation describes how the CMS can download and store external media assets when provided with URLs in the seed.json configuration file.\n- [INDIRECT_PROMPT_INJECTION]: The skill guides the user in building a CMS-driven site that ingests and renders content from a database or external JSON seeds. While this establishes a surface for indirect prompt injection if the content source is untrusted, the skill incorporates standard sanitization practices, such as XML escaping for RSS feeds and HTML sanitization for search result snippets.\n
  • Ingestion points: Content is loaded from seed.json files and database entries via query functions like getEmDashCollection and getEmDashEntry. User input is ingested via search components.\n
  • Boundary markers: Standard Astro/React component isolation and escaping are used for rendering.\n
  • Capability inventory: The framework facilitates command-line operations (npx), file storage, and database management.\n
  • Sanitization: The skill documents the use of escapeXml for RSS generation and mentions that search results provide sanitized HTML snippets.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 05:31 AM