frame-logo-outro
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied data such as brand names and taglines to populate an HTML template.
- Ingestion points: The
SKILL.mdfile specifies that the agent must use user-provided brand names and taglines. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands in the user input are provided.
- Capability inventory: The skill generates HTML, CSS, and SVG content for rendering a video-style outro.
- Sanitization: There are no explicit instructions for sanitizing or escaping the user-provided strings before interpolation into the HTML structure.
- [EXTERNAL_DOWNLOADS]: The example implementation fetches styling and typography resources from well-known services.
- Evidence: The
example.htmlfile includes a script tag forcdn.tailwindcss.comand a link tag forfonts.googleapis.comto load the Inter and Noto Sans SC font families.
Audit Metadata