html-timeline-roadmap
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill includes proactive security guidelines for the agent, specifically instructing it to avoid Cross-Site Scripting (XSS) vulnerabilities by using safe DOM APIs (e.g.,
textContent,createElement) instead ofinnerHTMLwhen handling variable data or user input. - [SAFE]: The skill restricts the use of external resources, allowing only Google Fonts via standard links while forbidding the loading of external scripts or runtimes from CDNs or package managers, which limits the potential for remote code execution or supply chain attacks.
- [SAFE]: Security is further enhanced by the explicit prohibition of persistent browser storage mechanisms like
localStorage,sessionStorage, orIndexedDBwithin the generated artifacts. - [SAFE]: No suspicious patterns such as prompt injection, data exfiltration, or obfuscation were detected in the skill's instructions or metadata.
Audit Metadata