html-interactive-playground
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a template for generating interactive HTML artifacts, focusing on user-driven parameter tuning in a secure, isolated manner.
- [SAFE]: It enforces security best practices by explicitly advising against the use of
innerHTMLwith variable data to prevent XSS vulnerabilities, recommendingtextContentandcreateElementinstead. - [SAFE]: External dependencies are strictly limited to Google Fonts; the instructions specifically forbid loading other resources from npm or CDNs to keep artifacts self-contained.
- [SAFE]: Data submission is handled through a secure local bridge (localhost/127.0.0.1) or via the clipboard, which are whitelisted and prevent unauthorized data exfiltration to external domains.
- [SAFE]: The skill's functionality is consistent with its stated purpose, and it uses local plugin resources and tools within the same vendor namespace without showing any suspicious behavior.
Audit Metadata