building-emdash-site
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for using developer CLI tools, such as
pnpm devfor starting a development server andnpx emdashfor type generation and database seeding.\n- [EXTERNAL_DOWNLOADS]: The documentation describes how the CMS can download and store external media assets when provided with URLs in theseed.jsonconfiguration file.\n- [INDIRECT_PROMPT_INJECTION]: The skill guides the user in building a CMS-driven site that ingests and renders content from a database or external JSON seeds. While this establishes a surface for indirect prompt injection if the content source is untrusted, the skill incorporates standard sanitization practices, such as XML escaping for RSS feeds and HTML sanitization for search result snippets.\n - Ingestion points: Content is loaded from
seed.jsonfiles and database entries via query functions likegetEmDashCollectionandgetEmDashEntry. User input is ingested via search components.\n - Boundary markers: Standard Astro/React component isolation and escaping are used for rendering.\n
- Capability inventory: The framework facilitates command-line operations (
npx), file storage, and database management.\n - Sanitization: The skill documents the use of
escapeXmlfor RSS generation and mentions that search results provide sanitized HTML snippets.
Audit Metadata