skills/iii-hq/iii/presentation/Gen Agent Trust Hub

presentation

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests technical specifications from markdown files and renders them using React's dangerouslySetInnerHTML without sanitization. Ingestion points: Technical specification markdown files in tech-specs/<slug>/ (processed in SKILL.md and base/scripts/manifest.mjs). Boundary markers: Absent for the markdown rendering process. Capability inventory: The skill generates source code, performs file system writes, and executes build and development scripts (vite build, pnpm dev). Sanitization: The Markdown and Mermaid components in base/src/content/markdown.tsx and base/src/content/mermaid.tsx pass content directly to dangerouslySetInnerHTML without filtering script or HTML tags.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 07:11 PM