html-research-reports
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data from sources like Slack and the web, creating an indirect prompt injection surface.
- Ingestion points: SKILL.md mentions synthesizing data from Slack threads, web pages, and git history.
- Boundary markers: No specific delimiters or boundary markers are defined for the ingested data.
- Capability inventory: The skill generates local HTML files on disk.
- Sanitization: The instructions explicitly mandate the use of textContent and document.createElement while forbidding innerHTML for any content containing variables or user input, effectively mitigating XSS risks in the generated reports.
- [EXTERNAL_DOWNLOADS]: The skill allows the inclusion of Google Fonts via CSS links, which is a well-known and trusted service.
Audit Metadata