chrono-flow
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes external JSON data which serves as an ingestion point for indirect prompt injection attacks. \n
- Ingestion points: Data is loaded from user-specified JSON files or standard input within
scripts/generate_timeline.py. \n - Boundary markers: The skill does not implement specific delimiters to isolate untrusted data during the generation process. \n
- Capability inventory: The script includes file-writing capabilities to output the generated HTML content to the local filesystem. \n
- Sanitization: The implementation correctly uses
html.escapefor text interpolation and applies a regex filter to CSS theme values to prevent tag breakouts and CSS injection.
Audit Metadata