frame-flowchart-sticky
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions are limited to visual design and data mapping, with no evidence of malicious logic or unauthorized commands.- [EXTERNAL_DOWNLOADS]: The example HTML references well-known services (Tailwind CSS and Google Fonts) for styling purposes, which is standard for web-based templates.- [PROMPT_INJECTION]: The skill processes user-supplied text to generate flowchart nodes (Ingestion Point: User content in SKILL.md; Capability: HTML generation). While this presents a surface for indirect prompt injection, it is a functional requirement of the skill and represents a low risk managed by standard agent output guardrails.
Audit Metadata