halo-theme-dev
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's starter template (
assets/theme-vite/package.json) includes dependencies on@halo-dev/theme-package-cli,@halo-dev/vite-plugin-halo-theme, andvite. These are official vendor resources and well-known developer tools. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process documentation from
docs.halo.runand user-provided theme files. This represents a potential surface for indirect prompt injection. - Ingestion points: External documentation URLs and local theme files (
theme.yaml, templates,settings.yaml). - Boundary markers: Instructions in
SKILL.mdguide the agent to fetch only relevant documentation and prioritize local project configuration over training data. - Capability inventory: File system read/write for theme development and subprocess calls for build tools (Vite, pnpm).
- Sanitization: The skill follows standard Thymeleaf patterns; while
th:utextis used for rendering CMS content, this is typical for theme implementation.
Audit Metadata