editorial-burgundy-principles-template
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses standard HTML, CSS, and localized JavaScript for UI navigation. No external dependencies, network requests, or obfuscated code patterns were detected.
- [SAFE]: The project includes a security checklist (
references/checklist.md) that explicitly prohibits the use of sensitive browser APIs likelocalStorageandalert, demonstrating best practices for sandbox safety. - [PROMPT_INJECTION]: The skill consumes user-provided text to populate slide templates and outputs the result using the
file_writecapability. It does not provide the agent with specific instructions to escape or sanitize this content, which creates a potential surface for indirect prompt injection. - Ingestion points: User-provided headlines and body text processed by the agent.
- Boundary markers: Not present in the instruction set for data interpolation.
- Capability inventory: The skill uses the
file_writecapability to generate the output HTML artifacts (referenced inSKILL.md). - Sanitization: Absent; there are no instructions to validate or sanitize user input before it is written into the HTML structure.
Audit Metadata