mobile
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes a version check mechanism that performs an HTTP GET request to the vendor's domain (foundry.thehorizonfoundry.com). This request is used to notify the user of updates and transmits only the skill name and current version.
- [COMMAND_EXECUTION]: A shell script is provided to manage the version check process, including checking a local timestamp file and executing the network request via curl. This is a standard utility function for maintaining the skill.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a diagnostic surface by instructing the agent to ingest runtime DOM properties (such as document.activeElement) to analyze layout issues. 1. Ingestion points: DOM state readings in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: Local file writing for matrix artifacts in SKILL.md. 4. Sanitization: Absent.
Audit Metadata