theme-factory
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted user-provided artifacts (documents, slides, HTML) to apply styling, which creates a surface for indirect prompt injection if those artifacts contain malicious instructions.\n
- Ingestion points: User-provided artifacts (slides, docs, reports, HTML) as described in SKILL.md and theme generation inputs.\n
- Boundary markers: None identified; the skill lacks instructions to isolate data from commands.\n
- Capability inventory: Reading theme files and modifying user-provided artifacts.\n
- Sanitization: No content sanitization or validation is specified.\n- [NO_CODE]: The skill does not contain any executable code, scripts, or binaries; it is composed strictly of Markdown documentation and theme definitions.
Audit Metadata